Help with next steps to get past this provisioning error please?

[Ranac]

OK set up a fresh version of 3cx V16 as a lab

Trying to provision a Yealink T38 remotely.
Disallow use of extension outside the LAN (Remote extensions using Direct SIP or STUN will be blocked) is not selected
Using Direct SIP (STUN - remote)
Host is digital ocean
All ports per documentation are confirmed open
Firmware is set to the required version and no SSL is selected.
Pictures of the yealink config included below.

Setting the url link in the phone and saying autoprovision does nothing. Even after rebooting the phone.
Turning on Zero touch on the phone will get t he phone to prompt for a login and password. After entering it the phone says updating then updating failed.
Adding the username of the extension and the voicemail pin as the password in the phone provision page auto populates that info. (still fails)

See video for what phone is doing. We cant find any log with relevant info on why this is happening. Any help in where to look to figure out why would be appreciated!



Video of phone failing

Pictures of Phone settings

 

[diamond9]

you dont need to full in usernames/password, these are included in the provisioning file.

Also this phone is end of life, there is a known limitation listed at the bottom as

No support for “Let’s encrypt”
(certificate check needs to be disabled manually if used as remote extension)

Maybe change that option on the phone

 

[diamond9]

Also in settings -> security turn off

 

[Ranac]

Also in settings -> security turn off

View attachment 15768

Which area has settings with security I am not able to find that. All I see is the certificate area. I have that shut off and I also uploaded the CA we used from the server to it just in case. We are not using lets encrypt.

 

[Ranac]

Nevermind I found it. I had to reread it. You meant in the 3cx. That seems to have solved getting past where it was stuck too thank you.

 

[diamond9]

Perfect, glad i could help