Cisco 7965G Administration Manual page 66

Configuring Security on the Cisco Unified IP Phone
For more information about the security features, see the
Unified IP Phones" section on page
Guide.
A Locally Significant Certificate (LSC) installs on phones after you perform the necessary tasks that are
associated with the CAPF. You can use Cisco Unified Communications Manager Administration to
configure an LSC, as described in Cisco Unified Communications Manager Security Guide.
Alternatively, you can initiate the installation of an LSC from the Security Configuration menu on the
phone. This menu also lets you update or remove an LSC.
Before you begin, make sure that the appropriate Cisco Unified Communications Manager and the
Certificate Authority Proxy Function (CAPF) security configurations are complete:
The CTL file should have a CAPF certificate.
•
The CAPF certificate must exist in the /usr/local/cm/.security/certs folder in every server in the
•
cluster.
The CAPF is running and configured.
•
Refer to Cisco Unified Communications Manager Security Guide for more information.
To configure an LSC on the phone, perform the following procedure. Depending on how you have
configured the CAPF, this procedure installs an LSC, updates an existing LSC, or removes an existing
LSC.
Procedure
Step 1 Obtain the CAPF authentication code that was set when the CAPF was configured.
From the phone, press the Settings > Security Configuration.
Step 2
Note
Step 3 Press **# to unlock settings on the Security Configuration menu. (See the
Options" section on page 4-3
Note If a Settings Menu password has been provisioned, SIP phones present an "Enter password" prompt after
you enter **#.
Scroll to LSC and press the Update softkey.
Step 4
The phone prompts for an authentication string.
Enter the authentication code and press the Submit softkey.
Step 5
The phone begins to install, update, or remove the LSC, depending on how the CAPF was configured.
During the procedure, a series of messages appears in the LSC option field in the Security Configuration
menu so that you can monitor progress. When the procedure completes successfully, the phone will
display Installed or Not Installed.
The LSC install, update, or removal process can take a long time to complete. You can stop the process
at any time by pressing the Stop softkey from the Security Configuration menu. (Settings must be
unlocked before you can press this softkey.)
Cisco Unified IP Phone 7965G and 7945G Administration Guide for Cisco Unified Communications Manager 6.0
3-14
You can control access to the Settings Menu by using the Settings Access field in the
Cisco Unified Communications Manager Administration Phone Configuration Settings page.
For more information, see Cisco Unified Communications Manager Administration Guide.
for information using locking and unlocking options.)
"Understanding Security Features for Cisco
1-9. Also, refer to Cisco Unified Communications Manager Security
Chapter 3 Setting Up the Cisco Unified IP Phone
"Unlocking and Locking
OL-12650-01