Solved No phones will provision and hot desking users can not log on

[Lee Cramman]

Cloud hosted, using SBCs.

Since overnight, across both sites on several SBCs none of our phones will provision or log on for hot desking any more. Previously logged on users are OK, but everyone else can't log on.

Everything working fine yesterday, can't see that there have been any updates that would break anything, the server hasn't been touched for over a month. From the logs it appears as if the phones are looking for the provisioning files and can reach the server but there are no provisioning files provided. If I factory reset a phone it will not provision either as a hot desking phone or assigned to a user. The majority pf phones are Yealink T73W (wired).

Server spec is fine (2 vcpu, 4Gb RAM), lots of free disk space, firewall is fine.

It almost feels like the provisioning db or folders are somehow compromised.

Any ideas where I can start to troubleshoot this?

 

[Alphabetic]

Ran a firewall test?

Provisioning is on 443 or 5001 - has a firewall become more restrictive?

Content filtering been enabled?

 

[SteveITS]

Did the certificate renew by chance?

 

[ChrisC_3CX]

@Lee Cramman Try forcing a certificate renewal by following this guide: https://www.3cx.com/blog/docs/ssl-certificate-renewal/

There was a change in one of the intermediate ssl certs from the issuer that resulted in some instances ending up with an incomplete chain. Forcing a renewal should solve this for you.

 

[Lee Cramman]

I think this probably was a cert issue - I followed the instructions from @ChrisC_3CX

I'm off-site and only have remote access to the PBX but I can see that I can now successfully reboot phones from the admin portal (which I don't think I could before).

I will confirm it's fixed on-site first thing Monday - thanks.

Do I leave TEMPORARY_SELF_SIGNED_CERTIFICATE_GENERATED set to 1? The instructions didn't say to switch it back...

 

[ChrisC_3CX]

@Lee Cramman No need to worry about that it should have already switched back to 0 once certs where renewed.

 

[Lee Cramman]

@ChrisC_3CX that worked, thank you.