Configuring Peap - Cisco 7925G - Unified Wireless IP Phone VoIP Administration Manual

Configuring Network Profiles
Export the Authentication Server Root Certificate from the ACS. See
Step 1
ACS, page
Go to the phone web page and choose Certificates.
Step 2
Click Import next to the Authentication Server Root certificate.
Step 3
Restart the phone.
Step 4
Configuring the ACS Server Setup
To set up the user account name and install the MIC root certificate for the phone on the ACS, follow
these steps:
For more information about using the ACS configuration tool, see the ACS online help or the User Guide
Note
for Cisco Secure ACS for Windows.
Procedure
From the ACS configuration tool User Setup page, create a phone user account name if it is not already
Step 1
set up. Typically, the user name includes the phone MAC address at the end (for example,
CP-7925G-SEPxxxxxxxxxxxx). No password is necessary for EAP-TLS.
Note
On the System Configuration page, in the EAP-TLS section, enable these fields:
Step 2
•
•
On the ACS Certification Authority Setup page, add the Manufacturing Root Certificate and
Step 3
Manufacturing CA Certificate to the ACS server.
Enable both the Manufacturing Root Certificate and Manufacturing CA Certificate in the ACS
Step 4
Certificate Trust List.

Configuring PEAP

Protected Extensible Authentication Protocol (PEAP) uses server-side public key certificates to
authenticate clients by creating an encrypted SSL/TLS tunnel between the client and the authentication
server.
Note The authentication server validation can be enabled by importing the authentication server certificate.
Before You Begin
Before you configure PEAP authentication for the phone, make sure these Cisco Secure ACS
requirements are met:
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
4-22
4-20.
Make sure the user name matches the Common Name field in the User Certificate Installation
page. See "Requesting and Importing the User Installed Certificate" section on page
Allow EAP-TLS
Certificate CN comparison.
Chapter 4 Using the Cisco Unified Wireless IP Phone 7925G Web Pages
Exporting Certificates from the
4-21.
OL-15984-01