Cisco Unified Wireless IP Phone 7925G Series Deployment Guide
72
Installing Certificates
The Cisco Unified Wireless IP Phone 7925G Series supports DER encoded binary X.509 certificates, which can be utilized with
EAP-TLS or for authentication server validation when using PEAP (MS-CHAPv2).
Extensible Authentication Protocol Transport Layer Security (EAP-TLS) is using the TLS protocol with PKI to secure
communications to the authentication server.
TLS provides a way to use certificates for both user and server authentication and for dynamic session key generation.
EAP-TLS provides excellent security, but requires client certificate management.