Nortel SMC 2450, Implementation Manual

Page: 131 / 262

Secure UNIStim deployment Page 131 of 260
Secure Multimedia Controller Implementation Guide
First-time deployment
Nortel recommends that Secure UNIStim be enabled on a small group of
target users first to ensure the process is understood. After operation has been
confirmed for a couple of days, the Policies or Network definitions can be
changed to include additional IP clients.
Configuring Secure UNIStim
The Secure UNIStim wizard in the Web UI guides you through the baseline
procedure to enable UNIStim security, create a private key for encryption,
select the policy, and specify the UNIStim servers to be proxied.
IMPORTANT!
Prior to deploying Secure UNIStim, install the supported firmware image
on all IP phones served by the SMC.
Turn on the default Secure UNIStim policies for an initial deployment.
The policies try to upgrade IP phones to security (but does not require it)
and automatically add the public key fingerprint to any phones were
never configured for security.
When Secure UNIStim is turned on the first time, all proxied secure and
insecure UNIStim connections are re-established and their current calls
are dropped.
WARNING
Enabling Secure UNIStim causes all phones
communicating with configured UNIStim servers to reset
and reconnect through the SMC. Because of this, enable
Secure UNIStim only during a maintenance window. It
generally takes between 3 to 5 minutes for phones to
reset.