3-13
Cisco Unified IP Phone 7962G and 7942G Administration Guide for Cisco Unified Communications Manager 7.0
OL-15483-01
Chapter 3 Setting Up the Cisco Unified IP Phone
Configuring Security on the Cisco Unified IP Phone
•
You also may configure the domain name and the DNS server settings, if necessary.
Collect this information and see the instructions in
Chapter 4, “Configuring Settings on the Cisco
Unified IP Phone.”
Configuring Security on the Cisco Unified IP Phone
The security features protect against several threats, including threats to the identity of the phone and to
data. These features establish and maintain authenticated communication streams between the phone and
the Cisco Unified Communications Manager server, and digitally sign files before they are delivered.
For more information about the security features, see the
“Understanding Security Features for Cisco
Unified IP Phones” section on page 1-9
. Also, refer to
Cisco Unified Communications Manager Security
Guide
.
A Locally Significant Certificate (LSC) installs on phones after you perform the necessary tasks that are
associated with the Certificate Authority Proxy Function (CAPF). You can use Cisco Unified
Communications Manager Administration to configure an LSC, as described in
Cisco Unified
Communications Manager Security Guide
.
Alternatively, you can initiate the installation of an LSC from the Security Configuration menu on the
phone. This menu also lets you update or remove an LSC.
Before You Begin
Make sure that the appropriate Cisco Unified Communications Manager and the Certificate Authority
Proxy Function (CAPF) security configurations are complete:
•
The CTL file should have a CAPF certificate.
•
The CAPF certificate must exist in the /usr/local/cm/.security/certs folder in every server in the
cluster.
•
The CAPF is running and configured.
Refer to
Cisco Unified Communications Manager Security Guide
for more information.
To configure an LSC on the phone, perform these steps.
Procedure
Step 1
Obtain the CAPF authentication code that was set when the CAPF was configured.
Step 2
From the phone, choose
Settings > Security Configuration
.
Note
You can control access to the Settings Menu by using the Settings Access field in the
Cisco Unified Communications Manager Administration Phone Configuration window. For
more information, see the
Cisco Unified Communications Manager Administration Guide
.
Step 3
Press
**#
to unlock settings on the Security Configuration menu. (See the
“Unlocking and Locking
Options” section on page 4-3
for information using locking and unlocking options.)
Note
If a Settings Menu password has been provisioned, SIP phones present an “Enter password”
prompt after you enter **#.