Adding Audit Certificates - Cisco C20 TelePresence System Administrator's Manual

Cisco TelePresence System Quick Set C20 and Profiles using C20
Contents

Adding audit certificates

Audit logging records all sign in activity and configuration
changes on your video system.
Audit logging is disabled by default, but you can enable it
using the Security > Audit > Logging > Mode
on-screen menu or the web interface.
In ExternalSecure audit logging mode the video system
sends encrypted audit logs to an external audit server
(syslog server), which identity must be verified by a signed
certificate.
To be able to verify the signature of the audit server
certificates, a list of trusted audit certificate authorities (CAs)
must reside on the video system.
If the audit server cannot be authenticated, the logs will not
be sent.
Always upload the audit certificate list before enabling
secure audit logging.
D14637.10 Profile C20 and Quick Set C20 Administrator Guide TC6.1, APRIL 2013.
Introduction Web interface Web interface
Navigate to: Configuration > Security / Configuration > System Configuration
setting on the
System settings
iii
ii
i
38
Setting passwords
1. Upload a list of audit server certificates
The entries in a new file with CA
certificates will overwrite the existing
list, that is, any previously stored audit
certificates will be lost when you add a
new file.
i. Click Add audit server certificate
ii. Click Browse... and find the file containing the
list of audit CA certificates (.PEM format) on
your computer.
iii. Click Add audit certificate
certificate(s) on your system.
Contact your system administrator to
obtain the Audit CA list (file format: .PEM).
2. Enable secure audit
logging
i. Go to the
ii. Enter the
iii. Choose ExternalSecure
www.cisco.com — Copyright © 2010-2013 Cisco Systems, Inc. All rights reserved.
Administrator Guide
Appendices
authority....
to store the
System
Configuration page and
choose the Security
category.
Address and
Port number of the audit
server. Click Save for the
changes to take effect.
from the Logging Mode
drop-down list. Click
Save for the change to
take effect.