Nortel SMC 2450, Руководство по внедрению

Страница: 142 / 262

Page 142 of 260 Secure UNIStim deployment
553-3001-225 Standard 1.00 May 2006
Procedure 39
Configuring the IP Phone 1140e and IP Phone 1120e for security
1 If configuring the first time, power on the phone.
2 Press the four soft tabs at the bottom of the screen, once each from left
to right, to enter the configuration menu.
Note: If phone is already powered on, press the services or global button
twice in quick succession and then select option 3, which is the Network
Configuration Menu.
IMPORTANT!
For Phase 2 IP Phone 2001/IP Phone 2002/IP Phone 2004 phones, you
can set the RSA public key fingerprint after the action byte is set to 6 for
either the S1 or S2 servers. The key fingerprints, however, are not tied to
either of the S1 or S2 servers even though it may appear this way during
the configuration. Instead, the two allowed fingerprints are treated as a
pool of fingerprints; either one can authenticate S1 or S2
WARNING
The automatic update feature is available for IP phones
that do not have security set. After the RSA public key
fingerprint or the action byte is set, the initial key
automatic update directed by the SMC no longer works.
Automatic update is different than the fingerprint update
in that the automatic update occurs when the back-end
SMC changes its primary key to a secondary key. In
fingerprint update, the current fingerprint on the phone,
which corresponds to the secondary key, is overwritten
with the new fingerprint of the primary key.
If the IP phones have an old fingerprint but you want to
use the automatic update feature, you must manually set
the public key fingerprint to “ffffffffffffffff” when you
configure the IP phones for security. See “Configure the
IP phones for security” on
page 141 .