Certificates; Wlans And Roaming - Cisco 8821 Administration Manual

Certificates

Cisco WLAN Configuration
WPA/WPA2-PSK
For more information, see the Cisco Wireless IP Phone 8821 Series Deployment Guide.
Certificates
The phones support the following certificates.
• X.509 digital certificate for EAP-TLS or to enable PEAP + Server Validation for WLAN authentication
• Simple Certificate Enrollment Protocol (SCEP) for certificate enrollment and auto-renewal
• 1024, 2048, 4096 bit keys
• SHA-1 and SHA-256 signature types
• DER and Base-64 (PEM) encoding types
• User Installed Certificate in PKCS #12 format (.p12 or .pfx extension), which also contains the private
• Server (Root CA) Certificate with .crt or .cer extension
You install certificates on the phones in one of these ways:
• Use the Administration web page. For more information, see
• Use an SCEP server to manage and install the certificates. For more information, see
If your users set up their phones themselves and their phones need certificates, you need to give them the type
of certificate when you give them the other configuration settings. If you don't use SCEP for certificate
installation, then you need to install the certificates yourself.

WLANs and Roaming

The wireless phones support Cisco Centralized Key Management (CCKM), a centralized key management
protocol that provides a cache of session credentials on the wireless domain server (WDS).
For details about CCKM, see the Cisco Fast Secure Roaming Application Note at:
http://www.cisco.com/en/US/products/hw/wireless/ps4570/prod_technical_reference09186a00801c5223.html
The phones also support 802.11r. For more information, see the Cisco Wireless IP Phone 8821 Series
Deployment Guide.
Cisco Wireless IP Phone 8821 and 8821-EX Administration Guide for Cisco Unified Communications Manager
28
key
page 69.
page 75
WPA-PSK or TKIP or AES
WPA2-PSK
VoIP Networks
Phone Configuration
WPA/WPA2 PSK
Cisco IP Phone Administration Page, on
SCEP Setup, on