Field Notice: FN74183 - Cisco Jabber and Cisco Webex App Show Voicemail Service Disconnected From Cisco Unity Connection - Configuration Change Recommended
Available Languages
Notice
THIS FIELD NOTICE IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTY OF MERCHANTABILITY. YOUR USE OF THE INFORMATION ON THE FIELD NOTICE OR MATERIALS LINKED FROM THE FIELD NOTICE IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS FIELD NOTICE AT ANY TIME.
Products Affected
| Affected Software Product | Affected Release | Affected Release Number | Comments |
|---|---|---|---|
| Cisco Jabber | 14 | 14.3(1) | All releases 14.3(1)1 and later |
| Cisco Unity Connection | 12.5, 14, 15 | All releases | |
| Cisco Webex App | 44 | 44.5 | All releases 44.5 and later |
Defect Information
| Defect ID | Headline |
| CSCwk33540 | WebEx 44.5+ shows voicemail services disconnected with Unity (Jabber/ Webex App) |
| CSCwm00548 | WebEx 44.5+ shows voicemail services disconnected (CUC) |
Problem Description
Cisco Jabber releases 14.3(1) and later and Cisco Webex App releases 44.5 and later do not support SHA-1. Consequently, Cisco Unity Connection certificates that are signed with SHA-1 will show voicemail services as disconnected.
Background
Cisco Jabber releases 14.3(1) and later and Cisco Webex App releases 44.5 and later will not support SHA-1 in trusted TLS negotiations. TLS server certificates and public CA-signed certificates must use SHA-2.
Cisco has made this change to align with the latest industry standards, to provide enhanced security considerations to customers, and to support industry-wide deprecation of SHA-1. Other software providers have made similar changes:
- For iOS 13 and later and macOS Catalina 10.15 and later, TLS server certificates and issuing CAs must use a hash algorithm from the SHA-2 family in the signature algorithm because SHA-1 signed certificates are no longer trusted for TLS negotiations. See Requirements for trusted certificates in iOS 13 and macOS 10.15.
- Customers who operate on Windows OS versions must have SHA-2 code signing support installed on their devices to install the latest updates released on or after July 2019. Devices without SHA-2 support will not be able to install any Windows updates on or after July 2019. See SHA-1 Windows content to be retired August 3, 2020.
- For Android 10 and later releases, certificates that use the SHA-1 hash algorithm are not trusted in TLS connections. See Behavior changes: all apps.
Problem Symptom
Cisco Unity Connection voicemail services will show as disconnected if security certificates are signed with SHA-1. TLS negotiations with Jabber releases 14.3(1) and later and Webex App releases 44.5 and later will fail with SHA-1 signed security certificates.
Workaround/Solution
Cisco recommends working with your certificate provider to sign Unity Connection certificates with SHA-2 algorithms.
Revision History
| Version | Description | Section | Date |
| 1.0 | Initial Release | — | 2024-SEP-19 |
For More Information
For further assistance or for more information about this field notice, contact the Cisco Technical Assistance Center (TAC) using one of the following methods:
Receive Email Notification About New Field Notices
To receive email updates about Field Notices (reliability and safety issues), Security Advisories (network security issues), and end-of-life announcements for specific Cisco products, set up a profile in My Notifications.
FeedbackContact Cisco
- Open a Support Case
- (Requires a Cisco Service Contract)