Cisco 7925G - Unified Wireless IP Phone VoIP Administration Manual page 94

Configuring Network Profiles
To verify the MIC, the Manufacturing Root Certificate and Manufacturing Certificate Authority (CA)
Certificate must be exported from a Cisco Unified Wireless IP Phone 7925G and installed on the Cisco
ACS server. These two certificates are part of the trusted certificate chain used to verify the MIC by the
Cisco ACS server.
To verify the Cisco ACS certificate, a trusted subordinate certificate (if any) and root certificate (created
from a CA) on the Cisco ACS server must be exported and installed on the phone. These certificate(s)
are part of the trusted certificate chain used to verify the trust of the certificate from the ACS server.
User Installed Certificate
To use a user installed certificate, a Certificate Signing Request (CSR) must be generated on the phone,
sent to the CA for approval, and the approved certificate installed on the Cisco Unified Wireless IP
Phone 7925G.
During EAP-TLS authentication, the ACS server needs to verify the trust of the phone and the phone
needs to verify the trust of the ACS server.
To verify the authenticity of the user installed certificate, a trusted subordinate certificate (if any) and
root certificate from the CA that approved the user certificate must be installed on the Cisco ACS server.
These certificate(s) are part of the trusted certificate chain used to verify the trust of the user installed
certificate.
To verify the Cisco ACS certificate, a trusted subordinate certificate (if any) and root certificate (created
from a CA) on the Cisco ACS server must be exported and installed on the phone. These certificate(s)
are part of the trusted certificate chain used to verify the trust of the certificate from the ACS server.
To install authentication certificates for EAP-TLS, perform the tasks listed in
Table 4-6 Installing the Certificate for EAP-TLS
Task
Set the Cisco Unified
1.
Communications Manager date and
time on the phone.
If using the Manufacturing Installed
2.
Certificate (MIC):
Export the CA root certificate
a.
and manufacturing CA
certificate.
b. Install certificates on the
Cisco ACS server and edit the
trust list.
Export the CA certificate from
c.
the ACS server and import it to
the phone.
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
4-18
Chapter 4
From
Cisco Unified Wireless IP Phone 7925G
web page
Cisco Unified Wireless IP Phone
•
7925G web page
Internet Explorer
•
Microsoft Certificate Services
•
Using the Cisco Unified Wireless IP Phone 7925G Web Pages
Table
For more information, see...
Setting the Date and Time, page 4-19
Exporting and Installing the Certificates
on the ACS, page 4-19
Exporting the CA Certificate from the
ACS Using Microsoft Certificate
Services, page 4-20
4-6:
OL-15984-01