Field Notice: FN - 72302 - Cisco IP Phones Might Fail to Operate Correctly Due to a New Manufacturer Installed Certificate - Configuration Change Recommended

Notice

THIS FIELD NOTICE IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTY OF MERCHANTABILITY. YOUR USE OF THE INFORMATION ON THE FIELD NOTICE OR MATERIALS LINKED FROM THE FIELD NOTICE IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS FIELD NOTICE AT ANY TIME.

Revision History

Revision	Publish Date	Comments
1.3	07-Jun-23	Updated the Products Affected Section
1.2	23-Dec-22	Updated the Workaround/Solution Section
1.1	19-Jul-22	Updated the Products Affected, Problem Description, Problem Symptom, and Workaround/Solution Sections
1.0	07-Apr-22	Initial Release

Products Affected

Affected Product ID	Comments
CP-6851-3PCC-K9=
CP-6841-3PCC-K9=
CP-6821-3PCC-K9=
CP-7861-3PCC-K9=
CP-7841-3PCC-K9=
CP-7821-3PCC-K9=
CP-7811-3PCC-K9=
CP-7832-3PCC-K9=
CP-6871-3PCC-K9=
CP-6861-3PW-K9
CP-8811-3PCC-K9=
CP-8811-3PCC-K9++=
CP-8811-3PC-RC-K9=
CP-8851-3PCC-K9=
CP-8861-3PCC-K9=
CP-8841-3PCC-K9=
CP-8865-3PCC-K9=
CP-8845-3PCC-K9=
CP-8832-3PCC-K9=
ATA192-3PW-K9
ATA191-3PW-K9
CP-7811-K9=	Manufacturing Date: 3/2022 and later
CP-7821-K9=	Manufacturing Date: 4/2022 and later
CP-7841-K9=	Manufacturing Date: 2/2022 and later
CP-7861-K9=	Manufacturing Date: 3/2022 and later
CP-8811-A-K9=	Manufacturing Date: 4/2022 and later
CP-8811-K9++=	Manufacturing Date: 5/2022 and later
CP-8811-K9=	Manufacturing Date: 2/2022 and later
CP-8811-W-K9=	Manufacturing Date: 3/2022 and later
CP-8811-NC-K9=	Manufacturing Date: 5/2022 and later
CP-8841-K9++=	Manufacturing Date: 5/2022 and later
CP-8841-K9=	Manufacturing Date: 5/2021 and later
CP-8841-W-K9=	Manufacturing Date: 2/2022 and later
CP-8841-NC-K9=	Manufacturing Date: 5/2022 and later
CP-8851-A-K9=	Manufacturing Date: 1/2022 and later
CP-8851-K9++=	Manufacturing Date: 4/2022 and later
CP-8851-K9=	Manufacturing Date: 5/2021 and later
CP-8851-W-K9=	Manufacturing Date: 2/2022 and later
CP-8851-NC-K9=	Manufacturing Date: 4/2022 and later
CP-8851NR-K9++=	Manufacturing Date: 4/2022 and later
CP-8851NR-K9=	Manufacturing Date: 2/2022 and later
CP-8861-A-K9=	Manufacturing Date: 1/2022 and later
CP-8861-K9++=	Manufacturing Date: 3/2022 and later
CP-8861-K9=	Manufacturing Date: 5/2021 and later
CP-8861-NC-K9=	Manufacturing Date: 3/2022 and later
CP-8861-W-K9=	Manufacturing Date: 1/2022 and later
CP-8811-K9++=	Manufacturing Date: 5/2022 and later
CP-8811-NC-K9=	Manufacturing Date: 5/2022 and later
CP-7832-K9=	Manufacturing Date: 11/22/2022
CP-7832-W-K9=	Manufacturing Date: 11/22/2022
CP-7832-K9++=	Manufacturing Date: 2/10/2023
CP-8832-K9	Manufacturing Date: 8/3/2022
CP-8832-W-K9	Manufacturing Date: 8/3/2022
CP-8832-W-K9=	Manufacturing Date: 8/3/2022
CP-8832-NR-K9	Manufacturing Date: 8/3/2022
CP-8832-NR-K9=	Manufacturing Date: 8/3/2022
CP-8832-K9++	Manufacturing Date: 2/1/2023
CP-8832-K9++=	Manufacturing Date: 2/1/2023
CP-8832-NR-K9++	Manufacturing Date: 2/1/2023
CP-8832-NR-K9++=	Manufacturing Date: 2/1/2023
CP-8832-EU-K9	Manufacturing Date: 8/3/2022
CP-8832-EU-K9=	Manufacturing Date: 8/3/2022
CP-8832-EU-W-K9	Manufacturing Date: 8/3/2022
CP-8832-EU-W-K9=	Manufacturing Date: 8/3/2022
CP-8832-J-W-K9	Manufacturing Date: 8/3/2022
CP-8832-J-W-K9=	Manufacturing Date: 8/3/2022
CP-8832-LA-K9	Manufacturing Date: 8/3/2022
CP-8832-LA-K9=	Manufacturing Date: 8/3/2022
CP-8832-LA-W-K9	Manufacturing Date: 8/3/2022
CP-8832-LA-W-K9=	Manufacturing Date: 8/3/2022
CP-8845-K9=	Manufacturing Date: 10/20/2022
CP-8845-W-K9=	Manufacturing Date: 10/26/2022
CP-8845-K9++=	Manufacturing Date: 1/27/2023
CP-8845-A-K9=	Manufacturing Date: 11/9/2022
CP-8845-NC-K9=	Manufacturing Date: 1/27/2023
CP-8865-K9=	Manufacturing Date: 10/20/2022
CP-8865-W-K9=	Manufacturing Date: 10/26/2022
CP-8865-K9++=	Manufacturing Date: 1/27/2023
CP-8865NR-K9=	Manufacturing Date: 10/20/2022
CP-8865NR-K9++=	Manufacturing Date: 1/27/2023
CP-8865-A-K9=	Manufacturing Date: 11/9/2022
CP-8865-NC-K9=	Manufacturing Date: 1/27/2023
ATA191-K9	Manufacturing Date: 11/4/2022
CP-8875-L-K9=	Manufacturing Date: from shipping
CP-8875-K9=	Manufacturing Date: from shipping
CP-8875NR-K9=	Manufacturing Date: from shipping
CP-8875NR-K9++=	Manufacturing Date: from shipping

Defect Information

Defect ID	Headline
CSCwb15715	MPP/Enterprise Phones and ATA: Shipping with MIC certificate issued by new Cisco Manufacturing CA

Problem Description

Multiplatform Phones (MPPs), Analog Telephone Adapters (ATAs), and Enterprise Phones will fail to operate if a new Certificate Authority (CA) is not added in the server trust list. Newly manufactured MPPs, ATAs, and Enterprise Phones will ship with a Cisco Manufacturing CA III or Cisco Manufacturing HA SUDI CA issued device certificate. If the new CA is not added in the server trust list, secure network deployment will fail to operate.

Background

If the new CA is not added in the server trust list, secure network deployment will fail to operate. An administrator must install the new CA in order to ensure secure device communication and operation.

This field notice lists the base Product IDs (PIDs), but pertains to all PIDs of the same model. See the Products Affected section for further details.

Problem Symptom

Secure network deployment will fail to operate on affected MPP and Enterprise devices.

Workaround/Solution

An administrator must install the new CA information in order to ensure secure device communication and operation.

For the affected MPP, ATA, and Enterprise Phone, service providers and administrators need to add the necessary files, based on the device type, to the trusted root certificate bundle they use to validate the phones' device certificate against.

MPP and ATA

The certificate (CER) and Privacy Enhanced Mail (PEM) file links are included here:

• Cisco Manufacturing CA III (cmca3) - CER / Cisco Manufacturing CA III (cmca3) - PEM
• Cisco Basic Assurance Root CA 2099 (cbarc2099) - CER / Cisco Basic Assurance Root CA 2099 (cbarc2099) - PEM
• Cisco Manufacturing HA SUDI CA - CER / Cisco Manufacturing HA SUDI CA - PEM
• Cisco Root CA 2099 (crca2099) - CER / Cisco Root CA 2099 (crca2099) - PEM

Enterprise Phone

The CER and PEM file links are included here:

• Cisco Manufacturing CA III (cmca3) - CER / Cisco Manufacturing CA III (cmca3) - PEM 
• Cisco Basic Assurance Root CA 2099 (cbarc2099) - CER / Cisco Basic Assurance Root CA 2099 (cbarc2099) - PEM

For the Cisco Unified Communictions Manager (UCM) version equal to or later than 11.5 SU9, 12.5 SU4, and 14, the new CA is natively installed, therefore it will not be affected. For the process of CA installation on Cisco UCM and Identity Services Engine (ISE), refer to:

• Administration Guide for Cisco Unified Communications Manager, Release 12.5(1) - Upload the Certificate or Certificate Chain
• Import and Export Certificates in ISE - Import the Certificate in ISE

For More Information

If you require further assistance, or if you have any further questions regarding this field notice, please contact the Cisco Systems Technical Assistance Center (TAC) by one of the following methods:

• Open a service request on Cisco.com
• By email or telephone

Receive Email Notification For New Field Notices

My Notifications—Set up a profile to receive email updates about reliability, safety, network security, and end-of-sale issues for the Cisco products you specify.