Certificate for iOS13 and Android10 on SM

[DucDuong19]

Dear all,
My system has CM, SM, SMGR with version 7.1.3.
My issue is avaya IX workplate client install on iOS13 and android10 can not register to SIP account when using tls service.

Please share me your experience to solve this issue.
Thanks so much.

 

[jimbojimbo]

This would most likely be a certificate issue. Perform a traceSM with TLS enabled. You will see the client hello, server respond and supply the server certificate and then the client closing the connection with an unknown CA error. If you get no response then it is a server validation issue.

The client must recognize the Session Manager certificate as being issued from a CA it knows. The "easy" way to do this is to include the CA cert/Chain on the HTTP server where you are pulling your 46xxsettings.txt file from. Look in the 46xxsettings.txt file for the TRUSTCERTS parameter.

For the server validation issue make sure you have a DNS entry for your Session Manager SM100 interface. Alternatively you can modify the TLSSRVRID and/or TLSSRVRVERIFYID parameters and set them to 0 so the client doesn't verify the server identity (they default to 1).