Security Enhancements For Your Phone Network - Cisco 7800 Series Administration Manual

Security Enhancements for Your Phone Network

The Cisco IP Phone 7800 Series complies with Federal Information Processing Standard (FIPS). To function
correctly, FIPS mode requires an RSA key size of 2048 bits or greater. If the RSA server certificate is not
2048 bits or greater, the phone will not register with Cisco Unified Communications Manager and Phone
failed to register. Cert key size is not FIPS compliant displays on the phone.
You cannot use private keys (LSC or MIC) in FIPS mode.
If the phone has an existing LSC that is smaller than 2048 bits, you need to update the LSC key size to 2048
bits or greater before enabling FIPS.
Related Topics
Security Enhancements for Your Phone Network
You can enable Cisco Unified Communications Manager 11.5(1) and 12.0(1) to operate in an enhanced
security environment. With these enhancements, your phone network operates under a set of strict security
and risk management controls to protect you and your users.
Cisco Unified Communications Manager 12.5(1) does not support an enhanced security environment. Disable
FIPS before upgrading to Cisco Unified Communications Manager 12.5(1) or your TFTP and other services
will not function properly.
The enhanced security environment includes the following features:
• Contact search authentication.
• TCP as the default protocol for remote audit logging.
• FIPS mode.
• An improved credentials policy.
• Support for the SHA-2 family of hashes for digital signatures.
• Support for a RSA key size of 512 and 4096 bits.
For additional information about security, see the following:
• Cisco IP Phone 7800 and 8800 Series Security
• Security Guide for Cisco Unified Communications
Note
Your Cisco IP phone can only store a limited number of Identity Trust List (ITL) files. ITL files cannot exceed
64K limit on phone so limit the number of files that the Cisco Unified Communications Manager sends to the
phone.
Cisco IP Phone 7800 Series Administration Guide for Cisco Unified Communications Manager
72
Cisco Unified Communications Manager
Set Up a Locally Significant
collaboration-endpoints/unified-ip-phone-8800-series/white-paper-listing.html)
unified-communications/unified-communications-manager-callmanager/
products-maintenance-guides-list.html)
Documentation, on page xiii
Certificate, on page 76
Overview(https://www.cisco.com/c/en/us/products/
Manager(https://www.cisco.com/c/en/us/support/
Cisco IP Phone Administration