Create a New Phone Security Profile
You must have a phone security profile for your phones. You can either:
• Use the default Phone Security Profile from the Cisco Options Package (COP) file:
Cisco 840 Standard SIP Non-Secure Profile
Cisco 860 Standard SIP Non-Secure Profile
• Use an existing Phone Security Profile if it conforms to the following recommended values.
• Create a unique Phone Security Profile for the Webex Wireless Phone 840 and 860.
The Certificate Authority Proxy Function (CAPF) must be operational to use a Locally Signed Certificate
(LSC) with a security profile. The phones have a Manufacturing Installed Certificate (MIC), which can be
used with a security profile as well.
Note
Each deployment is unique and may require options other than the following recommendations due to site
policy or administrative requirements.
Note
Procedure
Step 1
From the Cisco Unified Communications Manager Administration web page, select
System
>
Security
>
Phone Security Profile
.
Step 2
Click
Add New
.
Step 3
Select the phone model:
Cisco 840
Cisco 860
Step 4
Click
Next
.
Step 5
On the
Phone Security Profile Information
pane, set these parameters:
•
Name
—Give the new profile a name, such as Cisco 860 – Encrypted with Digest Authentication.
•
Device Security Mode
—Select an option:
We do not currently support the
Authenticated
device security mode.
Note
•
Encrypted
—For TLS and SRTP.
•
Non Secure
—To use UDP or TCP.
•
Transport Type
—Select an option:
We do not recommend the
UDP
option, due to port connectivity issues. If you choose
TCP+UDP
, only TCP is used.
Note
Webex Wireless Phone 840 and 860 Administration Guide for Cisco Unified Communications Manager
41
Cisco Unified Communications Manager Phone Configuration
Create a New Phone Security Profile
