Cisco CTS-500 Configuration Manual page 48

Configuring Phone Security Profile Information
Table 1-12 SIP Phone Security Profile Information Fields
Field
Name
Description
Nonce Validity Time
Device Security Mode
Cisco Unified Communications Manager Configuration Guide for the Cisco TelePresence System
1-28
Chapter 1 Configuring Cisco Unified Communications Manager for the Cisco TelePresence System
Required Setting
Yes Enter a name for the security profile.
When you save the new profile, the name displays in the Device
Security Profile drop-down list box in the Phone Configuration
window for the phone type and protocol.
Tip Include the device model and protocol in the security profile
name to help you find the correct profile when you are
searching for or updating a profile.
— Enter a description for the security profile.
Yes Enter the number of minutes (in seconds) that the
The default value equals 600 (10 minutes). When the time expires,
Cisco Unified CM generates a new value.
Yes Choose Encrypted from the drop-down menu (recommended).
By selecting Encrypted, Cisco Unified CM provides integrity,
authentication, and encryption for the phone. A TLS connection that
uses AES128/SHA opens for signaling, and SRTP carries the media for
all phone calls on all SRTP-capable SIP hops.
The Media is Encrypted icon (closed lock) is displayed on the
Note
screen only when the Device Security mode is set to encrypted
and cluster security mode is set to 1
To configure and verify cluster security mode, see the
Verifying the
Security Mode
Solutions
Additional Device Security Mode field choices:
• Non Secure—No security features except image authentication
exist for the phone. A TCP connection opens to Cisco Unified CM.
• Authenticated—Cisco Unified CM provides integrity and
authentication for the phone. A TLS connection that uses
NULL/SHA opens.
(mixed
Cisco Unified Communications Manager
section of the Cisco TelePresence Security
Guide.
nonce value is valid.
mode).
OL-21851-01