Security Enhancements For Your Phone Network - Cisco 8800 Series Administration Manual

Cisco IP Phone Security
•
•

Security Enhancements for Your Phone Network

You can enable Cisco Unified Communications Manager 11.5(1) and later to operate in an enhanced security
environment. With these enhancements, your phone network operates under a set of strict security and risk
management controls to protect you and your users.
These security enhancements include:
• Contact search authentication.
• TCP as the default protocol for remote audit logging.
• FIPS mode.
• An improved credentials policy.
• Support for the SHA-2 family of hashes for digital signatures.
• Support for a RSA key size of 3072 and 4096 bits.
For additional information about working with and enabling these security requirements, see the "FIPS 140-2
Mode Setup" chapter of the Security Guide for Cisco Unified Communications Manager .
Note The phone can only store a limited number of Identity Trust List (ITL) files. You need to limit the number
of ITL files that the Cisco Unified Communications Manager can push to the phone. For more information,
see the Security Guide for Cisco Unified Communications Manager .
Security Enhancements for Your Phone Network, page 131
Supported Security Features, page 132
Cisco IP Phone 8800 Series Administration Guide for Cisco Unified Communications Manager
10
C H A P T E R
131