TLS errors

[complex1]

(11-05-2020 09:07 PM)jverbarg Wrote:  Hey, I just got a new batch of T46S phones, a couple will not register over TLS.

Each phone is configured the same, is on the same firmware version: 66.85.0.5
Has the same hardware version: 66.0.0.128.0.0.0
Has a factory installed device certificate

When I do a capture, they all start negotiating over TLS 1.2, same cipher suite selected (0xc014), but on a couple of the devices, after that initial negotiation, the phone initiates a downgrade to TLS 1.0, which my server then rejects.

How do I stop this? Thanks

Hi,

Please add next to your provisioning file.

Code:

##It configures the TLS version the IP phone uses to authenticate with the server.
static.security.default_ssl_method = 5

Hope this will help.