Ctl File Authenticates But Other Configuration Files Do Not Authenticate - Cisco 8800 Series Administration Manual

Cisco IP Phone Security Problems
Cause
The security token that signed the updated CTL file does not exist in the CTL file on the phone.
Solution
Change the security token in the CTL file and install the new file on the phone.

CTL File Authenticates but Other Configuration Files Do Not Authenticate

Problem
Phone cannot authenticate any configuration files other than the CTL file.
Cause
A bad TFTP record exists, or the configuration file may not be signed by the corresponding certificate in the
phone Trust List.
Solution
Check the TFTP record and the certificate in the Trust List.
ITL File Authenticates but Other Configuration Files Do Not Authenticate
Problem
Phone cannot authenticate any configuration files other than the ITL file.
Cause
The configuration file may not be signed by the corresponding certificate in the phone Trust List.
Solution
Re-sign the configuration file by using the correct certificate.
TFTP Authorization Fails
Problem
Phone reports TFTP authorization failure.
Cause
The TFTP address for the phone does not exist in the CTL file.
If you created a new CTL file with a new TFTP record, the existing CTL file on the phone may not contain
a record for the new TFTP server.
Solution
Check the configuration of the TFTP address in the phone CTL file.
Cisco IP Phone 8800 Series Administration Guide for Cisco Unified Communications Manager
298