Cisco Ip Phone 8800 Series Administration Guide For Cisco Unified Communications Manager - Cisco 8800 Series Administration Manual

Feature
AES 256 Encryption
The following table contains the Trust List update alarm messages and meaning. For more information, see
the Cisco Unified Communications Manager documentation.
Table 20: Trust List Update Alarm Messages
Code and Message
1 - TL_SUCCESS
2 - CTL_INITIAL_SUCCESS
3 - ITL_INITIAL_SUCCESS
4 - TL_INITIAL_SUCCESS
5 - TL_FAILED_OLD_CTL
6 - TL_FAILED_NO_TL
7 - TL_FAILED
8 - TL_FAILED_OLD_ITL
9 - TL_FAILED_OLD_TL
The Security Setup menu provides information about various security settings. The menu also provides access
to the Trust List menu and indicates whether the CTL or ITL file is installed on the phone.
Description
When connected to Cisco Unified Communications Manager Release 10.5(2) and later, the
phones support AES 256 encryption support for TLS and SIP for signaling and media
encryption. This enables phones to initiate and support TLS 1.2 connections using AES-256
based ciphers that conform to SHA-2 (Secure Hash Algorithm) standards and are Federal
Information Processing Standards (FIPS) compliant. The new ciphers are:
• For TLS connections:
◦ TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
◦ TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
• For sRTP:
◦ AEAD_AES_256_GCM
◦ AEAD_AES_128_GCM
For more information, see the Cisco Unified Communications Manager documentation.

Cisco IP Phone 8800 Series Administration Guide for Cisco Unified Communications Manager

Supported Security Features
Description
Received new CTL and/or ITL
Received new CTL, no existing TL
Received new ITL, no existing TL
Received new CTL and ITL, no existing TL
Update to new CTL failed, but have previous TL
Update to new TL failed, and have no old TL
Generic failure
Update to new ITL failed, but have previous TL
Update to new TL failed, but have previous TL
135