Simple Certificate Enrollment Protocol (Scep) - Cisco 8821 Manual

To manually install a server certificate, select Install for Authentication Server CA on the main certificates webpage.
Select Browse to point to the server certificate with PEM (Base-64) or DER encoding.
Will need to restart the Cisco Wireless IP Phone 8821 or 8821-EX after all certificates are installed.

Simple Certificate Enrollment Protocol (SCEP)

SCEP is the standard for automatically provisioning and renewing certificates avoiding manual installation and re-installation of
certificates on clients.
A Cisco IOS Registration Agent (RA) (e.g. Cisco IOS router) can serve as a proxy (e.g. SCEP RA) to the SCEP enabled CA
that is to issue certificates.
Need to ensure that the same CA chain is used for issuing certificates to the phones as well as for the RADIUS servers;
otherwise server validation could fail.
For initial certificate enrollment via SCEP, the Cisco Wireless IP Phone 8821 and 8821-EX needs to be connected to a network
either while docked with a supported USB to Ethernet dongle connected in the back of the dock or using the default Wi-Fi
settings (i.e. SSID = cisco and Security Mode = None), which has connectivity to the Cisco Unified Communications Manager.
Use of a supported USB to Ethernet dongle for initial provisioning purposes only and not to convert the Cisco Wireless IP
Phone 8821 or 8821-EX to a wired IP phone.
The following USB to Ethernet dongles are supported.
•
Apple USB 2.0 Ethernet Adapter (www.apple.com)
•
Belkin B2B048 USB 3.0 Gigabit Ethernet Adapter (www.belkin.com)
•
D-Link DUB-E100 USB 2.0 Fast Ethernet Adapter (www.dlink.com)
•
Linksys USB3GIG USB 3.0 Gigabit Ethernet Adapter (www.linksys.com)
•
Linksys USB300M USB 2.0 Ethernet Adapter (www.linksys.com)
Cisco Wireless IP Phone 8821 and 8821-EX Wireless LAN Deployment Guide
153