Wildcard support VVX

[Anonymous]

Hi,

We have following config:

Lync 2013 with Edge support for external clients (homeworkers, mobile clients, federation). External clients are connected over the internet (so no VPN). On the Edge we use wildcard certificate, same for reverse proxy. Reverse Proxy is a IIS (application request routing, ARR microsoft). On the end devices we use VVX 500 range. Internally we use the AD-CA authority to for our internal certificates (so no wildcards).

Phone specs:

• Updater:5.2.2.2723
• Assembly:3111-44500-001 Rev:A
• Model: VVX500

Lync Software on VVX:

• Label:Sip
• Application Lync soft: 5.0.2.2756

We can't login the VVX phones for homeworkers, for internal employees we don't have any issue. I'm afraid that wildcards doesn't work with VVX? I know that for CX (phone editions) wildcards aren't supported. My question is, is this also applicable for VVX range?

Please advice.

Thanks

[SteffenBaierUK]

Hello Koen,

welcome to the Polycom Community.

The Polycom phone range does not support Wildcards either.

You could try adding this Parameter and check again:

sec.TLS.SIP.strictCertCommonNameValidation="0"

Please be aware of the following when utilizing UCS 4.1.0 or later:

The use of Polycom UC Software versions 4.1.X (“Software”) requires the purchase of a separate Software license for every device that will use the Software in a Lync environment. You may not install, access, or use the Software in a Lync environment on more devices than are listed on your license until additional licenses have been purchased and authorized by Polycom. These licenses should be purchased from the same company from which you purchased the devices. You may operate devices against a Lync server for trial purposes for up to 30 days without purchasing a license. Use of the Software is subject to the terms and conditions of the End User License Agreement.

Polycom reserves the right to audit your deployment to verify that you have sufficient licenses to match the number of devices being used.

Information in regards of License Part Numbers can be found here

Please ensure to provide some feedback if this reply has helped you so other users can profit from your experience.

Best Regards

Steffen Baier

Polycom Global Services

[Anonymous · Accepted solution]

Hi,

No it isn't working with this config change.

So I assume that wildcard on edge for polycom VVX isn't supported.

What I did is

1) Wipe the phones config, go to Admin settings, "Reset to Defaults"

2) take every step, so first 1, 2, 3 (not 4) last 5

3) plug your Phone via BToE with the lync client

4) change your base profile to "Lync" via config url of the Phone

5) ones the Phone reboots, you get a pop up on the lync client

6) enter email user@domain.xx // enter user: domain\user // enter password

7) after pairing you should be able to see your contacts on the Phone, so its registered

But if you do a reset of the Phone, or do a sign out on the Phone, you should re-take every step again!!

if we look to other phones, they do support wildcard, so maybe something to put on the roadmap???

kr

[SteffenBaierUK]

Hello Koen,

Are you describing an external registration via Edge or an internal within your Network?

Using BToE does not copy a certificate on the phone, it simply parses the NTLM credentials from the LYNC client to the PC and the PC registers using NTLM authentication.

It should then switch to TLS-DSK receiving a certificate from the LYNC Webticket Server.

If you mean optimized for LYNC phones as other phones then they can use an additional authentication mechanism and also copy the certificate to the phone via better together so you cannot compare this.

Above suggested parameter will work as long as your LYNC environment is setup correctly.

Please ensure to provide some feedback if this reply has helped you so other users can profit from your experience.

Best Regards

Steffen Baier

Polycom Global Services