Cisco 8800 Series, Manual

Page: 83 / 544

The device can use digital certificates provided by a third-party Certificate Authority (CA) to authenticate
IPSec connections.
The phones support a set of preloaded Root Certificate Authority embedded in the firmware:
• Cisco Small Business CA Certificate
• CyberTrust CA Certificate
• Verisign CA certificate
• Sipura Root CA Certificate
• Linksys Root CA Certificate
Before you begin
Access the phone administration web page. See Access the Phone Web Interface, on page 104 .
Procedure
Step 1 Select Info > Status .
Step 2
Scroll to Custom CA Status and see the following fields:
• Custom CA Provisioning Status—Indicates the provisioning status.
• Last provisioning succeeded on mm/dd/yyyy HH:MM:SS; or
• Last provisioning failed on mm/dd/yyyy HH:MM:SS
• Custom CA Info—Displays information about the custom CA.
• Installed—Displays the “CN Value,” where “CN Value” is the value of the CN parameter for the
Subject field in the first certificate.
• Not Installed—Displays if no custom CA certificate is installed.
Profile Management
This section demonstrates the formation of configuration profiles in preparation for downloading. To explain
the functionality, TFTP from a local PC is used as the resync method, although HTTP or HTTPS can be used
as well.
Compress an Open Profile with Gzip
A configuration profile in XML format can become quite large if the profile specifies all parameters individually.
To reduce the load on the provisioning server, the phone supports compression of the XML file, by using the
deflate compression format that the gzip utility (RFC 1951) supports.
Cisco IP Phone 8800 Series Multiplatform Phone Administration Guide for Release 11.3(1) and Later
63
Cisco IP Phone Provisioning
Profile Management