Set Up Locally Significant Certificate - Cisco 7821 Administration Manual

Supported Security Features
Feature
Optional disabling of the web
server functionality for a
phone
Phone hardening
802.1X Authentication
Related Topics
Cisco IP Phone Security, on page 79
802.1x Authentication, on page 85
View Security Profiles, on page 80

Set Up Locally Significant Certificate

Use this procedure to configure an LSC on the phone.
Before You Begin
Make sure that the appropriate Cisco Unified Communications Manager and the Certificate Authority Proxy
Function (CAPF) security configurations are complete:
• The CTL or ITL file has a CAPF certificate.
• In Cisco Unified Communications Operating System Administration, verify that the CAPF certificate
is installed.
• The CAPF is running and configured.
For more information about these settings, see the "Configuring the Cisco CTL Client" section in the Cisco
Unified Communications Manager Security Guide.
Procedure
Step 1 Obtain the CAPF authentication code that was set when the CAPF was configured.
Step 2 From the phone, press Applications and choose Administrator Settings > Security Setup.
Cisco IP Phone 7821, 7841, and 7861 Administration Guide for Cisco Unified Communications Manager 10.0
(SIP)
82
Description
You can prevent access to a phone web page, which displays a variety of
operational statistics for the phone.
Additional security options, which you control from Cisco Unified
Communications Manager Administration:
• Disabling PC port
• Disabling PC Voice VLAN access
• Disabling access to web pages for a phone
You can view current settings for the PC Port Disabled, GARP
Note
Enabled, and Voice VLAN enabled options by looking at the phone
Security Configuration menu.
The Cisco IP Phone can use 802.1X authentication to request and gain access
to the network.