Cisco 7921G - Unified Wireless IP Phone VoIP Administration Manual page 93

Chapter 4 Using the Cisco Unified Wireless IP Phone 7921G Web Pages
Step 4 From the Microsoft Certificate Services Request a Certificate page, select Advanced certificate request
to initiate the signing request.
Step 5 At the Advanced Certificate Request page, select Submit a certificate request by using a
base-64-encoded PKCS CMC.
Step 6 Copy the certificate data from the Cisco Unified Wireless IP Phone 7921G and paste it in the Saved
Request text box, then click Submit.
Step 7 Once the CSR is approved, the certificate must be exported in a DER encoded format and sent to the
original requestor.
Step 8 Return to the phone web page and choose Certificates to import the signed certificate.
Step 9 On the Certificates page, locate the User Installed certificate line, and click Import. Browse to the
certificate on your PC to import to the phone.
Installing the Authentication Server Root Certificate
The Authentication Server Root Certificate must be installed on the Cisco Unified Wireless IP Phone
7921G.
To install the certificate, follow these steps:
Export the Authentication Server Root Certificate from the ACS. See
Step 1
ACS, page
Go to the phone web page and choose Certificates.
Step 2
Click Import next to the Authentication Server Root certificate.
Step 3
Restart the phone.
Step 4
Configuring the ACS Server Setup
To set up the user account name and install the MIC root certificate for the phone on the ACS, follow
these steps:
Note For more information about using the ACS configuration tool, see the ACS online help or the User Guide
for Cisco Secure ACS for Windows.
Procedure
From the ACS configuration tool User Setup page, create a phone user account name if it is not already
Step 1
set up. Typically, the user name includes the phone MAC address at the end , for example,
CP-7921G-SEP<xxxxxxxxxxxx>. No password is necessary for EAP-TLS.
Note
On the System Configuration page, in the EAP-TLS section, enable these fields:
Step 2
•
•
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
OL-15985-01
4-21.
Make sure the user name matches the Common Name field in the User Certificate Installation
page. See "Requesting and Importing the User Installed Certificate" section on page
Allow EAP-TLS
Certificate CN comparison.
Configuring Network Profiles
Exporting Certificates from the
4-22.
4-23