b) From Internet Explorer, install certificates on the Cisco ACS server and edit the trust list.
c) From Microsoft Certificate Services, export the CA certificate from the ACS server and import it to the
phone.
For more information, see:
•
Export and Install Certificates on ACS, on page 88
•
Export CA certificate from ACS using Microsoft Certificate Services, on page 88
Step 3
If using a user installed certificate, from phone web page:
a) Generate the Certificate Signing Request (CSR).
b) Send the CSR to CA to sign.
c) Import the certificate.
d) Install certificate on the Cisco ACS server and edit the trust list.
e) Download the CA certificate from the ACS server and import it into the phone.
For more information, see
Request and Import User-Installed Certificate, on page 89
.
Step 4
Using the ACS configuration tool, set up the user account.
For more information, see:
•
Set Up ACS User Account and Install Certificate, on page 90
•
User Guide for Cisco Secure ACS for Windows
Set Date and Time
EAP-TLS uses certificate-based authentication that requires the internal clock on the Cisco Unified Wireless
IP Phone to be set correctly. The date and time on the phone might change when it is registered to Cisco Unified
Communications Manager.
If a new server authentication certificate is being requested and the local time is behind the Greenwich
Mean Time (GMT), the authentication certificate validation might fail. Cisco recommends that you set
the local date and time ahead of the GMT.
Note
To set the phone to the correct local date and time, follow these steps.
Procedure
Step 1
Select
Date & Time
from the left navigation pane.
Step 2
If the setting in the Current Phone Date & Time field is different from the Local Date & Time field, click
Set
Phone to Local Date & Time
.
Step 3
Click
Phone Restart
, and then click
OK
.
Cisco Unified Wireless IP Phone 7925G, 7925G-EX, and 7926G Administration Guide
87
Cisco Unified Wireless IP Phone 7925G, 7925G-EX, and 7926G Web Pages
Wireless Security Credentials
