Installing Certificates - Cisco 7925G Deployment Manual

Installing Certificates

The Cisco Unified Wireless IP Phone 7925G, 7925G-EX, and 7926G support DER encoded binary X.509 certificates, which
can be utilized with EAP-TLS or for authentication server validation when using PEAP (MS-CHAPv2).
Extensible Authentication Protocol Transport Layer Security (EAP-TLS) is using the TLS protocol with PKI to secure
communications to the authentication server.
TLS provides a way to use certificates for both user and server authentication and for dynamic session key generation.
EAP-TLS provides excellent security, but requires client certificate management.
Microsoft® Certificate Authority (CA) servers are recommended as we have certified interoperability only with those CA types.
Other CA server types may not be completely interoperable with the Cisco Unified Wireless IP Phone 7925G, 7925G-EX, or
7926G.
Can utilize either the internal MIC (Manufacturing Installed Certificate) or install a User Installed certificate to be used for
authentication.
To use the MIC in the Cisco Unified Wireless IP Phone 7925G, 7925G-EX, and 7926G, the Manufacturing Root and
Manufacturing CA certificates must be exported and installed onto the RADIUS server.
Cisco Unified Wireless IP Phone 7925G, 7925G-EX, and 7926G Deployment Guide
96