Configuring Security On The Cisco Unified Ip Phone - Cisco CP-7970G Administration Manual

Configuring Security on the Cisco Unified IP Phone

Configuring Security on the Cisco Unified IP Phone
The security features protect against several threats, including threats to the identity of the phone and to
data. These features establish and maintain authenticated communication streams between the phone and
the Cisco Unified Communications Manager server, and digitally sign files before they are delivered.
For more information about the security features, see
IP Phones, page
You can initiate the installation of a Locally Significant Certificate (LSC) from the Security
Configuration menu on the phone. This menu also lets you update or remove an LSC.
Before you begin, make sure that the appropriate Cisco Unified Communications Manager and the
CAPF security configurations are complete:
•
•
•
Refer to Cisco Unified Communications Manager Security Guide for more information.
To configure an LSC on the phone manually, perform the following procedure. Depending on how you
have configured the CAPF, this procedure installs an LSC, updates an existing LSC, or removes an
existing LSC.
Procedure
Obtain the CAPF authentication code that was set when the CAPF was configured.
Step 1
From the phone, press the Settings > Security Configuration.
Step 2
Note
Press **# to unlock settings on the Security Configuration menu. (See
Step 3
page 4-3
Note
Step 4 Scroll to LSC and press the Update softkey.
The phone prompts for an authentication string.
Enter the authentication code and press the Submit softkey.
Step 5
The phone begins to install, update, or remove the LSC, depending on how the CAPF was configured.
During the procedure, a series of messages displays in the LSC option field in the Security Configuration
menu so you can monitor progress. When the procedure completes successfully, the phone will display
Installed or Not Installed.
Cisco Unified IP Phone Administration Guide for Cisco Unified Communications Manager 8.5
3-16
1-13. Also, refer to Cisco Unified Communications Manager Security Guide.
The CTL or ITL file should have a CAPF certificate
On Cisco Unified Communications Operating System Administration, verify that the CAPF
certificate has been installed
The CAPF is running and configured
You can control access to the Settings Menu by using the Settings Access field in the
Cisco Unified Communications Manager Administration Phone Configuration window. For
more information, see Cisco Unified Communications Manager Administration Guide.
for information about using locking and unlocking options.)
If a Settings Menu password has been provisioned, SIP phones present an "Enter password"
prompt after you enter **#.
Chapter 3 Setting Up the Cisco Unified IP Phone
Understanding Security Features for Cisco Unified
Unlocking and Locking Options,
OL-23092-01