Supported TLS and Ciphers
TLS v1.0
Cipher Suite: TLS_RSA_WITH_AES_256_CBC_SHA (0x0035)
Cipher Suite: TLS_RSA_WITH_AES_128_CBC_SHA (0x002f)
Cipher Suite: TLS_RSA_WITH_3DES_EDE_CBC_SHA (0x000a)
Set Up Locally Significant Certificate
You can initiate the installation of a Locally Significant Certificate (LSC) from the Security Configuration
menu on the phone. This menu also lets you update or remove an LSC.
Before You Begin
Make sure that the appropriate Cisco Unified Communications Manager and the Certificate Authority Proxy
Function (CAPF) security configurations are complete:
• The CTL file should have a CAPF certificate.
• Using Cisco Unified Communications Operating System Administration, verify that the CAPF certificate
has been installed.
• The CAPF is running and configured.
For more information, see the Cisco Unified Communications Manager Security Guide.
Procedure
Step 1
Obtain the CAPF authentication code that was set when the CAPF was configured.
Step 2
From the phone, choose Applications > Administrator Settings > Security Setup.
You can control access to the Administrator Settings Menu using the Settings Access field in the
Note
Cisco Unified Communications Manager Administration Phone Configuration window. For more
information, see the Cisco Unified Communications Manager Administration Guide.
Step 3
To unlock settings, see
Step 4
Scroll to LSC and press Update.
The phone prompts for an authentication string.
Step 5
Enter the authentication code and press Submit.
The phone begins to install, update, or remove the LSC, depending on how the CAPF was configured. During
the procedure, a series of messages appears in the LSC option field in the Security Configuration menu, so
you can monitor progress.
Step 6
You can verify that an LSC is installed on the phone by choosing Administrator Settings > Security Setup
and ensuring that the LSC setting shows Installed.
Cisco Unified IP Phone 8941 and 8945 Administration Guide for Cisco Unified Communications Manager 10.0 (SCCP
Apply a Phone Password, on page
Supported Security Features
31.
and SIP)
73