Cisco Desktop Collaboration Experience Phone Security; Set Up Locally Significant Certificate - Cisco DX650 Administration Manual

Cisco Desktop Collaboration Experience Phone Security

• IP address
• IP subnet information
• TFTP server IP address
• Gateway
• Netmask
You also may configure the domain name and the DNS server settings, if necessary.
Cisco Desktop Collaboration Experience Phone Security
The security features protect against several threats, including threats to the identity of the phone and to data.
These features establish and maintain authenticated communication streams between the phone and the Cisco
Unified Communications Manager server, and ensure that the phone uses only digitally signed files.
Cisco Unified Communications Manager Release 8.5(1) and later includes Security by Default, which provides
the following security features for Cisco Desktop Collaboration Experience phones without running the CTL
client:
• Signing of the phone configuration files
• Phone configuration file encryption
• HTTPS with Tomcat and other web services
Secure signaling and media features still require you to run the CTL client and use hardware eTokens.
Note
For more information about the security features, see the related topics and the Cisco Unified Communications
Manager Security Guide.
A Locally Significant Certificate (LSC) installs on phones after you perform the necessary tasks that are
associated with the Certificate Authority Proxy Function (CAPF). You can use Cisco Unified Communications
Manager Administration to configure an LSC, as described in the Cisco Unified Communications Manager
Security Guide.
Alternatively, you can initiate the installation of an LSC from the Security Setup menu on the phone. This
menu also lets you update or remove an LSC.

Set Up Locally Significant Certificate

Use this procedure to configure an LSC on the phone.
Before You Begin
Make sure that the appropriate Cisco Unified Communications Manager and the Certificate Authority Proxy
Function (CAPF) security configurations are complete:
• The CTL or ITL file has a CAPF certificate.
• In Cisco Unified Communications Operating System Administration, verify that the CAPF certificate
Cisco Desktop Collaboration Experience DX650 Administration Guide, Release 10.1(1)
68
is installed.