Understanding Security Features For Cisco Unified Ip Phones - Cisco 6921 Administration Manual

Understanding Security Features for Cisco Unified IP Phones

For a summary of some of the key information that phone users need their system administrators to
provide, see
Understanding Security Features for Cisco Unified IP Phones
Implementing security in the Cisco Unified CM system prevents identity theft of the phone and
Cisco Unified CM server, prevents data tampering, and prevents call signaling and media stream
tampering.
To alleviate these threats, the Cisco IP telephony network establishes and maintains secure
communication streams between a phone and the server, digitally signs files before they are transferred
to a phone, and encrypts media streams and call signaling between Cisco Unified IP phones.
The Cisco Unified IP Phone 6921, 6941, and 6961 use the Phone security profile, which defines whether
the device is nonsecure or encrypted. For information on applying the security profile to the phone, refer
to the Cisco Unified Communications Manager Security Guide.
If you configure security-related settings in Cisco Unified CM Administration, the phone configuration
file will contain sensitive information. To ensure the privacy of a configuration file, you must configure
it for encryption. For detailed information, refer to the "Configuring Encrypted Phone Configuration
Files" chapter in Cisco Unified Communications Manager Security Guide.
Table 1-5
Table 1-5 Cisco Unified IP Phone and Cisco Unified CM Security Topics
Topic
Detailed explanation of security, including set
up, configuration, and troubleshooting
information for Cisco Unified CM and Cisco
Unified IP Phones
Security features supported on the Cisco Unified
IP Phone
Restrictions regarding security features
Viewing a security profile name
Identifying phone calls for which security is
implemented
TLS connection
Security and the phone startup process
Security and phone configuration files
Changing the TFTP Server 1 or TFTP Server 2
option on the phone when security is
implemented.
Items on the Security Configuration menu that
you access from the Device Configuration menu
on the phone
Cisco Unified IP Phone 6921, 6941, and 6961 Administration Guide for Cisco Unified Communications Manager 8.0 (SCCP)
1-14
Appendix A, "Providing Information to Users Via a Website."
shows where you can find additional information about security in this and other documents.
Reference
Refer to the Troubleshooting Guide for Cisco Unified
Communications Manager
See the "Overview of Supported Security Features" section on page 1-15
See the "Security Restrictions" section on page 1-21
See the "Understanding Security Profiles" section on page 1-17
See the "Identifying Encrypted Phone Calls" section on page 1-17
• See the
See the
•
page 2-8
See the "Understanding the Phone Startup Process" section on page 2-6
See the "Adding Phones to the Cisco Unified CM Database" section on
page 2-8
See Table
See the "Security Configuration Menu" section on page 4-8
Chapter 1
"What Networking Protocols are Used?" section on page 1-9
"Adding Phones to the Cisco Unified CM Database" section on
4-2, in the "Network Setup Menu" section on page 4-4
An Overview of the Cisco Unified IP Phone
OL-20851-01