Switchvox - How to Fix SSL Authentication Fails Error Message (v.6.6.0.x and 6.7)
Error " SSL Authentication Failed: Credentials or SSL Certificate may be invalid..."
Or phone apps give unauthorized message (Switchvox version 6.6.x and above):
Verify that DHCP Boot 66 is not being used. If it is, the user should change the Phone's Configuration Server to the IP address of the Switchvox server.
On the Phone, go to Settings > Digium Configuration Server > enter the IP address of the Switchvox server and Port 5060. Press Go.
The phone should be able to communicate with the server.
Verify that the hostname on the certificate matches the hostname on the Switchvox:
Login as admin
Go to Server > IP Configuration > Advanced Options > Hostname
Verify that Phone Networks are setup using the Hostname and not the IP Address:
Go to Server > Phone Networks > Primary Host (PBX) > Host Address: Hostname or IP Address
Enter the Hostname that matches the certificate host
Verify your network has an internal DNS server setup and it resolves to internal IP address:
Go to Server > IP Configuration > DNS Addresses: enter a valid internal DNS server IP address
If you are not using a third party certificate:
Verify that Allow Insecure SSL is disabled on extension settings and that the Switchvox Managed setting is disabled on the HTTPs page:
Go to Setup > Extensions > Manage > click on yellow pencil to modify extensions, go to Phone Settings tab > Advanced Phone Options > SIP Setting > Allow Insecure SSL = Yes.
Save SIP Extension. The phone should reconfigure, or may need to be rebooted manually (by unplugging the phone).
Note: You should leave Switchvox Managed set to YES, unless you have purchased an SSL Certificate from a trusted 3rd party Certificate Authority, or your organization is acting as its own Certificate Authority.
If you are using a third party certificate, verify that the certificate has been reinstalled:
Go to Server > HTTPs & Proxy
If you are entering your own SSL Certificate information, set Switchvox Managed to NO.
For details on installing a Certificate review this article.
If the problem persists, reset the phone to factory defaults. Next, go to the phone's Settings menu and select Digium Configuration Server and enter the hostname and port 5060.
Note: A Digium Phone will register with Switchvox and make calls if the certificate settings are not correct, but apps such as Voicemail and Status will not work.