I had an SX20 not registering with CUCM, the error stated "reason=Failed to decrypt/verify signature of .."
The trick was to delete the security certificates of CUCM from SX20.
Go to Configuration -> Security -> CUCM and select "Delete CTL/ITL"
It would register in the next minutes, no need to restart.