Cisco 8831NR Administration Manual page 32

Supported Security Features
Supported Security Features
The following table provides an overview of the security features that the conference phone supports. For
more information about these features and about Cisco Unified Communications Manager and conference
phone security, see Cisco Unified Communications Manager Security Guide.
For information about current security settings on a conference phone, choose Apps > Admin Settings >
Security Setup.
Note
Most security features are available only if a certificate trust list (CTL) is installed on the conference phone.
For more information about the CTL, see "Configuring the Cisco CTL Client" chapter in Cisco Unified
Communications Manager Security Guide.
Table 8: Overview of Security Features
Feature
Image authentication
Customer-site certificate installation
Device authentication
Cisco Unified IP Conference Phone 8831 and 8831NR Administration Guide
22
Cisco Unified IP Conference Phone 8831 and 8831NR
Description
Signed binary files (with the extension .sebn)
prevent tampering with the firmware image before it
is loaded on a conference phone. Tampering with the
image causes a phone to fail the authentication process
and reject the new image.
Each conference phone requires a unique certificate
for device authentication. Conference phones include
a manufacturing installed certificate (MIC), but for
additional security, you can specify in Cisco
Unified Communications Manager Administration
that a certificate be installed by using the Certificate
Authority Proxy Function (CAPF). Alternatively, you
can install a Locally Significant Certificate (LSC)
from the Security Configuration menu on the phone.
Occurs between the Cisco Unified Communications
Manager server and the conference phone when each
entity accepts the certificate of the other entity.
Determines whether a secure connection between the
conference phone and a Cisco Unified
Communications Manager should occur; and, if
necessary, creates a secure signaling path between the
entities by using TLS protocol. Cisco Unified
Communications Manager will not register conference
phone unless they can be authenticated by the Cisco
Unified Communications Manager.