Cisco Ip Phone 7800 Series Administration Guide For Cisco Unified Communications Manager - Cisco 7800 series Administrator's Manual

Security Enhancements for Your Phone Network
The Cisco IP Phone 7800 Series complies with Federal Information Processing Standard (FIPS). To function
correctly, FIPS mode requires an RSA key size of 2048 bits or greater. If the RSA server certificate is not
2048 bits or greater, the phone will not register with Cisco Unified Communications Manager and Phone
failed to register. Cert key size is not FIPS compliant displays on the phone.
You cannot use private keys (LSC or MIC) in FIPS mode.
If the phone has an LSC, you need to update the LSC key size to 2048 bits or greater before enabling FIPS.
Related Topics
Cisco Unified Communications Manager Documentation, on page xiii
Set Up Locally Significant Certificate, on page 100
Security Enhancements for Your Phone Network
You can enable Cisco Unified Communications Manager 11.5(1) and later to operate in an enhanced security
environment. With these enhancements, your phone network operates under a set of strict security and risk
management controls to protect you and your users.
These security enhancements include:
• Contact search authentication.
• TCP as the default protocol for remote audit logging.
• FIPS mode.
• An improved credentials policy.
• Support for the SHA-2 family of hashes for digital signatures.
• Support for a RSA key size of 3072 and 4096 bits.
For additional information about working with and enabling these security requirements, see the "FIPS 140-2
Mode Setup" chapter of the Security Guide for Cisco Unified Communications Manager .
The phone can only store a limited number of Identity Trust List (ITL) files. You need to limit the number
Note
of ITL files that the Cisco Unified Communications Manager can push to the phone. For more information,
see the Security Guide for Cisco Unified Communications Manager .
View Current Security Features on Phone
For more information about the security features and about Cisco Unified Communications Manager and
Cisco IP Phone security, see the documentation for your particular Cisco Unified Communications Manager
release.

Cisco IP Phone 7800 Series Administration Guide for Cisco Unified Communications Manager

96