4-22
Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0
OL-15985-01
Chapter 4 Using the Cisco Unified Wireless IP Phone 7921G Web Pages
Configuring Network Profiles
To export the CA certificate using the Microsoft Certificate Services web page, follow these steps:
Procedure
Step 1
From the Microsoft Certificate Services web page, select Download a CA certificate, certificate chain
or CRL.
Step 2
At the next page, highlight the current CA certificate in the text box, choose DER under Encoding
Method, then click Download CA certificate.
Step 3
Save the CA certificate.
Exporting Certificates from the ACS Server Using Internet Explorer
Use this method for exporting the CA certificate from the ACS server that uses a self-signed certificate.
To export certificates from the ACS server using Internet Explorer, follow these steps:
Procedure
Step 1
From Internet Explorer, choose Tools > Internet Options, then click the Content tab.
Step 2
Under Certificates, click Certificates..., then click the Trusted Root Certification Authorities tab.
Step 3
Highlight the root certificate and click Export.... The Certificate Export Wizard appears. Click Next.
Step 4
At the next window, select DER encoded binary X.509 (.CER), and click Next.
Step 5
Specify a name for the certificate and click Next.
Step 6
Save the CA certificate to be installed on the phone.
Requesting and Importing the User Installed Certificate
To request and install the certificate on the phone, follow these steps:
Procedure
Step 1
From the phone web page, choose the network profile using EAP-TLS, and select User Installed in the
EAP-TLS Certificate field.
Step 2
Click Certificates. On the User Certificate Installation page, the Common Name field should match the
user name in the ACS server.
Note
You can edit the Common Name field if you wish. Make sure that it matches the user name in
the ACS server. See
“Configuring the ACS Server Setup” section on page 4-23
.
Enter the information to be displayed on the certificate, and click Submit to generate the Certificate
Signing Request (CSR).
Step 3
In the next screen, select and copy the entire contents of the text box. Send this data to the CA
administrator for signing.
The CSR text is encoded and should be sent to the Certificate Authority for signing. The CSR text can
be sent by e-mail or another method determined by your CA administrator. The following steps describe
the basic CSR approval process on the CA web page.