Manufacturing Installed Certificate; User Installed Certificate - Cisco 8821 Manual

Manufacturing Installed Certificate (MIC)
The pre-installed Manufacturing Installed Certificate (MIC) can be used as the User Certificate for EAP-TLS.
The MIC's CA chain must be exported and added to the RADIUS server's trust list if wanting to use the MIC as the User
Certificate for EAP-TLS.
Click Export to download the root and sub CA certificates from the admin webpage interface.

User Installed Certificate

To manually install a user certificate for EAP-TLS, select Install for User Installed on the main certificates webpage.
Select Browse to point to the user certificate in PKCS #12 format (.p12 or .pfx).
Enter the Extract password (up to 12 characters), then select Upload.
Ensure the CA chain that issued the user certificate is added to the RADIUS server's trust list.
Will need to restart the Cisco Wireless IP Phone 8821 or 8821-EX after all certificates are installed.
Server Certificate
The root CA certificate that issued the RADIUS server's certificate must be installed for EAP-TLS or to enable Server
Validation for PEAP-GTC or PEAP-MSCHAPV2.
Cisco Wireless IP Phone 8821 and 8821-EX Wireless LAN Deployment Guide
152