Hi,
 
    I was trying to use /CGI/Screenshot to get the screenshot of a physical phone (7961 & 7975).
 
    I always get <CiscoIPPhoneError Number="4"/>. This looks like to be an authorize issue.
 
     I'd be very grateful if anybody from the forum could tell me what else I am possibly missing? I have done the following checks:
         1.  The device's owner UID is correct;
         2.  The owner user belongs to "standard phone administrator" group;
         3.  The owner user's device association has the target phones in the list.
 
Thanks,
Ruwei
 
 

Thanks David.
 
I checked out the URL, it does return "AUTHORIZED", but I still get " <CiscoIPPhoneError Number="4" /> " when running the /CGI/Screenshot.
 
Any idea what might have gone wrong?
 
Best Regards,
Ruwei
 

I would next suspect that the authentication URL the phone is actually using is not the one you expect. 
 
You can see in more detail what exactly the phone is doing via a network packet capture: connect a PC to the phone's extra switch port and use Wireshark to capture the network traffic during a test.  Inspecting the HTTP packets should tell you exactly what request the phone is making and what the response is.
 
Feel free to attach the file here if you can't spot the problem.

Please ensure that the latest firmware load available on Cisco.com is running on the phone.  If you can reproduce this on a 7975, please grab a network packet capture - from the phone's extra PC switch port, via Wireshark - and attach here.

Hi,
I used to have this authentication bypass working fine but it now appears broken. I can't say if it's a firmware change or what.

Test Phone (BTW, same result with different phones): 7970G
Firmare: SCCP70.9-2-1S
CUCM: 8.5.1.13900-5

AUTHURLs tried
http://172.17.8.10/authenticate.htm
https://172.17.8.10/authenticate.htm
https://172.17.8.10/authenticate.jsp
https://10.30.10.14/authenticate.jsp

When I open a browser to any of those variations I get 'AUTHORIZED'. The file authenticate.htm or .jsp simply contains the word 'AUTHORIZED' with no other tags.

The phone can most certainly reach this IP from its network. I put a tcpdump on the webserver and verified the incoming request.

Confirmed the phone is using the proper auth url by looking at it's phone web page.

At one point, I checked the Console Logs on the phone said there was a handshake problem TLS with the server. The sniffer trace also shows an issue with TLSv1 Handshake failure (for the case when I use https).

I'm suspicious something changed where HTTPS is now required for this authentication URL and that the server must not be self-signed (where opening a browser gives you that 'okay to continue' message.

In all cases, I get a <CiscoIPPhoneError Number="4" /> error.

Can someone please help?