1-29
Cisco Unified Communications Manager Configuration Guide for the Cisco TelePresence System
OL-21851-01
Chapter 1 Configuring Cisco Unified Communications Manager for the Cisco TelePresence System
Configuring Phone Security Profile Information
Phone Security Profile CAPF Information
To configure the Phone Security Profile CAPF Information fields, follow these steps:
Step 1
Enter Phone Security Profile CAPF Information using the information in
Table 1-13
as a guide.
Step 2
Click the Save button to save your settings.
Transport Type
Yes
When Device Security Mode is Non Secure, choose one of the
following options from the drop-down list box (not all options may
display):
•
TCP—Choose the Transmission Control Protocol to ensure that
packets get received in the same order they are sent. This protocol
ensures that no packets get dropped, but the protocol does not
provide any security.
•
UDP—Choose the User Datagram Protocol to ensure that packets
are received quickly. This protocol, which can drop packets, does
not ensure that packets are received in the order that they are sent.
This protocol does not provide any security.
•
TCP + UDP—Choose this option if you want to use a combination
of TCP and UDP. This option does not provide any security.
When Device Security Mode is Authenticated or Encrypted, TLS
specifies the Transport Type. TLS provides signaling integrity, device
authentication, and signaling encryption (encrypted mode only) for
SIP phones.
Note
If Device Security Mode cannot be configured in the profile,
the transport type specifies UDP.
Enable Digest Authentication
—
Not supported on CTS devices. Leave this box unchecked.
TFTP Encrypted Config
—
When this box is checked, Cisco Unified CM encrypts phone
downloads from the TFTP server. This option exists for Cisco phones
only.
Tip
Cisco recommends that you enable this option and configure a
symmetric key to secure digest credentials and administrative
passwords.
Exclude Digest Credentials in
Configuration File
—
When this box is checked, Cisco Unified CM omits digest credentials
in phone downloads from the TFTP server. This option exists for Cisco
Unified IP SIP Phone models 7905, 7912, 7940, and 7960 only.
Table 1-12
SIP Phone Security Profile Information Fields (continued)
Field
Required
Setting