Cisco Ip Phone Security; Cisco Ip Phone Security Overview - Cisco 7800 Series Administration Manual

Cisco IP Phone Security

•
•
•
•
•

Cisco IP Phone Security Overview

The Security features protect against several threats, including threats to the identity of the phone and to data.
These features establish and maintain authenticated communication streams between the phone and the Cisco
Unified Communications Manager server, and ensure that the phone uses only digitally signed files.
Cisco Unified Communications Manager Release 8.5(1) and later includes Security by Default, which provides
the following security features for Cisco IP Phones without running the CTL client:
• Signing of the phone configuration files
• Phone configuration file encryption
• HTTPS with Tomcat and other Web services
Note Secure signaling and media features still require you to run the CTL client and use hardware eTokens.
For more information about the security features, see the documentation for your particular Cisco Unified
Communications Manager release.
A Locally Significant Certificate (LSC) installs on phones after you perform the necessary tasks that are
associated with the Certificate Authority Proxy Function (CAPF). You can use Cisco Unified Communications
Manager Administration to configure an LSC. For more information, see the documentation for your particular
Cisco Unified Communications Manager release.
A LSC cannot be used as the user certificate for EAP-TLS with WLAN authentication.
Alternatively, you can initiate the installation of an LSC from the Security Setup menu on the phone. This
menu also lets you update or remove an LSC.
Cisco IP Phone Security Overview, on page 71
Security Enhancements for Your Phone Network, on page 72
View the Current Security Features on the Phone, on page 73
View Security Profiles, on page 73
Supported Security Features, on page 73
Cisco IP Phone 7800 Series Administration Guide for Cisco Unified Communications Manager
7
C H A P T E R
71