Cisco 7970G - IP Phone VoIP Administration Manual page 90

Configuring Security on the Cisco Unified IP Phone
A Locally Significant Certificate (LSC) installs on phones after you perform the
necessary tasks that are associated with the Certificate Authority Proxy Function
(CAPF). You can use Cisco Unified Communications Manager Administration to
configure an LSC, as described in Cisco Unified Communications Manager
Security Guide.
Alternatively, you can initiate the installation of an LSC from the Security
Configuration menu on the phone. This menu also lets you update or remove an
LSC.
Before you begin, make sure that the appropriate Cisco Unified Communications
Manager and the CAPF security configurations are complete:
•
•
•
Refer to Cisco Unified Communications Manager Security Guide for more
information.
To configure an LSC on the phone, perform the following procedure. Depending
on how you have configured the CAPF, this procedure installs an LSC, updates
an existing LSC, or removes an existing LSC.
Procedure
Obtain the CAPF authentication code that was set when the CAPF was
Step 1
configured.
From the phone, press the Settings > Security Configuration.
Step 2
Note
Press **# to unlock settings on the Security Configuration menu. (See the
Step 3
"Unlocking and Locking Options" section on page 4-4
using locking and unlocking options.)
Cisco Unified IP Phone 7970G/7971G-GE Administration Guide for Cisco Unified Communications Manager 6.1
3-18
The CTL file should have a CAPF certificate.
The CAPF certificate must exist in the /usr/local/cm/.security/certs folder in
every server in the cluster.
The CAPF is running and configured.
You can control access to the Settings Menu by using the Settings Access
field in the Cisco Unified Communications Manager Administration
Phone Configuration window. For more information, see Cisco
Unified Communications Manager Administration Guide.
Chapter 3 Setting Up the Cisco Unified IP Phone
for information about
OL-14626-01