Table 18: Security Setup Menu
Option
Security Mode
LSC
Trust List
802.1X Authentication
Supported TLS and Ciphers
TLS v1.0
Cipher Suite: TLS_RSA_WITH_AES_256_CBC_SHA (0x0035)
Cipher Suite: TLS_RSA_WITH_AES_128_CBC_SHA (0x002f)
Description
Displays the security mode that is set for the
phone.
Indicates whether a locally significant certificate
that is used for security features is installed on
the phone (Yes) or is not installed on the phone
(No).
The Trust List provides submenus for the CTL,
ITL, and Signed Configuration files.
The CTL File submenu displays the contents of
the CTL file. The ITL File submenu displays
contents of the ITL file.
The Trust List menu also displays the following
information:
• CTL Signature: the SHA1 hash of the CTL
file
• Unified CM/TFTP Server: the name of the
Cisco Unified Communications Manager
and TFTP Server that the phone uses.
Displays a certificate icon if a certificate
is installed for this server.
• CAPF Server: the name of the CAPF server
that the phone uses. Displays a certificate
icon if a certificate is installed for this
server.
• SRST Router: the IP address of the trusted
SRST router that the phone can use.
Displays a certificate icon if a certificate
is installed for this server.
Allows you to enable 802.1X authentication for
this phone.
Cisco Unified IP Phone 8961, 9951, and 9971 Administration Guide for Cisco Unified Communications Manager 10.0
Supported Security Features
To Change
From Cisco Unified Communications Manager
Administration, choose Device > Phone. The
setting appears in the Protocol Specific Information
portion of the Phone Configuration window.
For information about how to manage the LSC for
your phone, see the "Using the Certificate Authority
Proxy Function" chapter in the Cisco Unified
Communications Manager Security Guide.
For more information, see
Set Up Locally
Significant Certificate, on page
See
802.1X Authentication, on page
164.
171.
163