Sipura Ca Client Root Certificate - Cisco 6800 Series Provisioning Manual

HTTPS Provisioning
for signing. Upon receiving the provserver.csr file, Cisco generates provserver.crt, the signed server
certificate.
Procedure
Step 1 Navigate to
Step 2
Select Certificate Management.
On the Sign CSR tab, the CSR of the previous step is uploaded for signing.
Step 3 From the Select Product drop-down list box, select SPA1xx firmware 1.3.3 and newer/SPA232D firmware
1.3.3 and newer/SPA5xx firmware 7.5.6 and newer/CP-78xx-3PCC/CP-88xx-3PCC.
Step 4 In the CSR File field, click Browse and select the CSR for signing.
Step 5 From the Sign in Duration drop-down list box, select the applicable duration (for example, 1 year).
Step 6
Click Sign Certificate Request.
Step 7 Select one of the following options to receive the signed certificate:
• Enter Recipient's Email Address: If you wish to receive the certificate via email, enter your email
address in this field.
• Download: If you wish to download the signed certificate, select this option.
Step 8
Click Submit.
The signed server certificate is then either emailed to the email address previously provided or downloaded.

Sipura CA Client Root Certificate

Cisco also provides a Sipura CA Client Root Certificate to the service provider. This root certificate certifies
the authenticity of the client certificate that each phone carries. The Multiplatform Phones also support
third-party signed certificates such as those provided by Verisign, Cybertrust, and so on.
The unique client certificate that each device offers during an HTTPS session carries identifying information
that is embedded in its subject field. This information can be made available by the HTTPS server to a CGI
script invoked to handle secure requests. In particular, the certificate subject indicates the unit product name
(OU element), MAC address (S element), and serial number (L element).
The following example from the Cisco IP Phone 6841 Multiplatform Phones client certificate subject field
shows these elements:
OU=CP-6841-3PCC, L=88012BA01234, S=000e08abcdef
Units manufactured before firmware 2.0.x do not contain individual SSL client certificates. When these units
are upgraded to a firmware release in the 2.0.x tree, they become capable of connecting to a secure server that
is using HTTPS, but are only able to supply a generic client certificate if the server requests them to do so.
This generic certificate contains the following information in the identifying fields:
OU=cisco.com, L=ciscogeneric, S=ciscogeneric
To determine if a phone carries an individualized certificate, use the $CCERT provisioning macro variable.
The variable value expands to either Installed or Not Installed, according to the presence or absence of a
Cisco IP Phone 6800 Series Multiplatform Phones Provisioning Guide
42
https://webapps.cisco.com/software/edos/home
In-House Preprovisioning and Provisioning Servers
and log in with your CCO credentials.