Manual Installation - Cisco 8861 Deployment Manual

Microsoft® Certificate Authority (CA) servers are recommended. Other CA server types may not be completely interoperable
with the Cisco IP Phone 8861 and 8865.
Both DER and Base-64 (PEM) encoding are acceptable for the client and server certificates.
Certificates with a key size of 1024, 2048, and 4096 are supported.
Ensure the client and server certificates are signed using either the SHA-1 or SHA-256 algorithm, as the SHA-3 signature
algorithms are not supported.
Ensure Client Authentication is listed in the Enhanced Key Usage section of the user certificate details.

Manual Installation

For out of box (factory reset) manual installation, the admin webpage interface is Enabled, the username is fixed to admin, and
the password is temporarily set to Cisco.
The temporary password will no longer be available once the phone registers to Cisco Unified Communications Manager.
The admin webpage interface will be Disabled on the phone once it registers to Cisco Unified Communications Manager
regardless if it contains support for the Web Admin and Admin Password options.
Once the phone has registered to CUCM, set Web Admin to Enabled in CUCM to enable the admin webpage interface.
Then configure Admin Password by specifying a 8-127 character string.
Cisco IP Phone 8861 and 8865 Wireless LAN Deployment Guide
154