Cisco 7925G - Unified Wireless IP Phone VoIP Administration Manual page 97

Chapter 4 Using the Cisco Unified Wireless IP Phone 7925G Web Pages
Step 2 Under Certificates, click Certificates..., then click the Trusted Root Certification Authorities tab.
Highlight the root certificate and click Export.... The Certificate Export Wizard appears. Click Next.
Step 3
At the next window, select DER encoded binary X.509 (.CER), and click Next.
Step 4
Specify a name for the certificate and click Next.
Step 5
Save the CA certificate to be installed on the phone.
Step 6
Requesting and Importing the User Installed Certificate
To request and install the certificate on the phone, follow these steps:
Procedure
Step 1 From the phone web page, choose the network profile using EAP-TLS, and select User Installed in the
EAP-TLS Certificate field.
Step 2 Click Certificates. On the User Certificate Installation page, the Common Name field should match the
user name in the ACS server.
Note
Enter the information to be displayed on the certificate, and click Submit to generate the Certificate
Signing Request (CSR).
In the next screen, select and copy the entire contents of the text box. Send this data to the CA
Step 3
administrator for signing.
The CSR text is encoded and should be sent to the Certificate Authority for signing. The CSR text can
be sent by e-mail or another method determined by your CA administrator. The following steps describe
the basic CSR approval process on the CA web page.
From the Microsoft Certificate Services Request a Certificate page, select Advanced certificate request
Step 4
to initiate the signing request.
At the Advanced Certificate Request page, select Submit a certificate request by using a
Step 5
base-64-encoded PKCS CMC.
Copy the certificate data from the Cisco Unified Wireless IP Phone 7925G and paste it in the Saved
Step 6
Request text box, then click Submit.
Once the CSR is approved, the certificate must be exported in a DER encoded format and sent to the
Step 7
original requestor.
Step 8 Return to the phone web page and choose Certificates to import the signed certificate.
Step 9 On the Certificates page, locate the User Installed certificate line, and click Import. Browse to the
certificate on your PC to import to the phone.
Installing the Authentication Server Root Certificate
The Authentication Server Root Certificate must be installed on the Cisco Unified Wireless IP Phone
7925G.
To install the certificate, follow these steps:
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
You can edit the Common Name field if you wish. Make sure that it matches the user name in
the ACS server. See "Configuring the ACS Server Setup" section on page
Configuring Network Profiles
4-22.
4-21