Description
Feature
Implements parts of the certificate generation procedure that are too
processing-intensive for the phone, and it interacts with the phone for key
generation and certificate installation. The CAPF can be configured to
request certificates from customer-specified certificate authorities on behalf
of the phone, or it can be configured to generate certificates locally.
CAPF (Certificate Authority
Proxy Function)
Defines whether the phone is nonsecure, authenticated, or encrypted. See
Security Profiles, on page 17
for more information.
Security profiles
Lets you ensure the privacy of phone configuration files.
Encrypted configuration files
You can prevent access to a phone web page, which displays a variety of
operational statistics for the phone.
Optional disabling of the web
server functionality for a phone
Additional security options, which you control from
Cisco Unified Communications Manager Administration:
•
Disabling Gratuitous ARP (GARP)
•
Disabling access to the Setting menus
•
Disabling access to web pages for a phone
You can view current settings for the GARP Enabled and Web
Access options by looking at the phone
’
s Device Information
menu. For more information, see
Display Security Configuration
Screen, on page 175
.
Note
Phone hardening
Related Topics
Security Profiles, on page 17
Authenticated, Encrypted, and Protected Phone Calls, on page 18
Device Information, on page 179
Security Restrictions, on page 19
Security Profiles
A security profile defines whether the phone is nonsecure, authenticated, encrypted, or protected. Every Cisco
Unified IP Phone that is supported by Cisco Unified Communications Manager Administration has a security
profile. For information about configuring the security profile and applying the profile to the phone, see
Cisco
Unified Communications Manager Security Guide
.
For Cisco Unified Wireless IP Phones using Cisco Unified CallManager 4.3 and later, security is configured
on each phone. For more information about configuring security, see
Cisco Unified CallManager Security
Guide
at
http://www.cisco.com/en/US/products/sw/voicesw/ps556/prod_maintenance_guides_list.html.
Note
Cisco Unified Wireless IP Phone 7925G, 7925G-EX, and 7926G Administration Guide
17
Cisco Unified Wireless IP Phone
Security Profiles
