Set Up A Locally Significant Certificate - Cisco 7800 Series Administration Manual

Set Up a Locally Significant Certificate

Feature
AES 256 Encryption
Elliptic Curve Digital Signature Algorithm (ECDSA)
certificates
Related Topics
Set Up a Locally Significant Certificate
This task applies to setting up a LSC with the authentication string method.
Before you begin
Make sure that the appropriate Cisco Unified Communications Manager and the Certificate Authority Proxy
Function (CAPF) security configurations are complete:
• The CTL or ITL file has a CAPF certificate.
• In Cisco Unified Communications Operating System Administration, verify that the CAPF certificate is
• The CAPF is running and configured.
Cisco IP Phone 7800 Series Administration Guide for Cisco Unified Communications Manager
76
Cisco Unified Communications Manager
Phone Call Security, on page 78
802.1x Authentication, on page 80
View Security Profiles, on page 73
installed.
Description
When connected to Cisco Unified Communications
Manager Release 10.5(2) and later, the phones support
AES 256 encryption support for TLS and SIP for
signaling and media encryption. This enables phones
to initiate and support TLS 1.2 connections using
AES-256 based ciphers that conform to SHA-2
(Secure Hash Algorithm) standards and are Federal
Information Processing Standards (FIPS) compliant.
The new ciphers are:
• For TLS connections:
• TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
• TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
• For sRTP:
• AEAD_AES_256_GCM
• AEAD_AES_128_GCM
For more information, see the Cisco Unified
Communications Manager documentation.
As part of Common Criteria (CC) certification, Cisco
Unified Communications Manager added ECDSA
certificates in version 11.0. This affects all Voice
Operating System (VOS) products from version
CUCM 11.5 and later.
Documentation, on page xiii
Cisco IP Phone Administration