Cisco 6901 Manual page 18

Supported Security Features
Feature
Device authentication
File authentication
Signaling Authentication
Manufacturing installed certificate
Secure SRST reference
Media encryption
Cisco Unified IP Phone
18
Description
Occurs between the Cisco Unified Communications
Manager server and the phone when each entity
accepts the certificate of the other entity. Determines
whether a secure connection between the phone and
a Cisco Unified Communications Manager should
occur and, if necessary, creates a secure signaling path
between the entities by using TLS protocol. Cisco
Unified Communications Manager will not register
phones unless they can be authenticated by the Cisco
Unified Communications Manager.
Validates digitally signed files that the phone
downloads. The phone validates the signature to make
sure that file tampering did not occur after the file
creation. Files that fail authentication are not written
to flash memory on the phone. The phone rejects
unauthenticated files without further processing.
Uses the TLS protocol to validate that no tampering
has occurred to signaling packets during transmission.
Each Cisco Unified IP Phone contains a unique
manufacturing installed certificate (MIC), which is
used for device authentication. The MIC is a
permanent unique proof of identity for the phone, and
allows Cisco Unified Communications Manager to
authenticate the phone.
After you configure a Cisco Unified Survivable
Remote Site Telephony (SRST) reference for security
and reset the dependent devices in Cisco Unified
Communications Manager, the TFTP server adds the
SRST certificate to the phone configuration file and
sends the file to the phone. A secure phone uses a TLS
connection to interact with the SRST-enabled router.
The configuration file uses one of the following
extensions:
• .cnf.xml
• .cnf.xml.sgn
• .cnf.xml.enc.sgn
Uses SRTP to ensure that the media streams between
supported phones proves secure and that only the
intended phone receives and reads the data. Includes
creating a media primary key pair for the phones,
delivering the keys to the phones, and securing the
delivery of the keys while the keys are in transport.
Cisco Unified IP Phone