4-18
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
Chapter 4 Using the Cisco Unified Wireless IP Phone 7925G Web Pages
Configuring Network Profiles
To verify the MIC, the Manufacturing Root Certificate and Manufacturing Certificate Authority (CA)
Certificate must be exported from a Cisco
Unified Wireless IP Phone 7925G and installed on the Cisco
ACS server. These two certificates are part of the trusted certificate chain used to verify the MIC by the
Cisco ACS server.
To verify the Cisco ACS certificate, a trusted subordinate certificate (if any) and root certificate (created
from a CA) on the Cisco ACS server must be exported and installed on the phone. These certificate(s)
are part of the trusted certificate chain used to verify the trust of the certificate from the ACS server.
User Installed Certificate
To use a user installed certificate, a Certificate Signing Request (CSR) must be generated on the phone,
sent to the CA for approval, and the approved certificate installed on the Cisco
Unified Wireless IP
Phone 7925G.
During EAP-TLS authentication, the ACS server needs to verify the trust of the phone and the phone
needs to verify the trust of the ACS server.
To verify the authenticity of the user installed certificate, a trusted subordinate certificate (if any) and
root certificate from the CA that approved the user certificate must be installed on the Cisco ACS server.
These certificate(s) are part of the trusted certificate chain used to verify the trust of the user installed
certificate.
To verify the Cisco ACS certificate, a trusted subordinate certificate (if any) and root certificate (created
from a CA) on the Cisco ACS server must be exported and installed on the phone. These certificate(s)
are part of the trusted certificate chain used to verify the trust of the certificate from the ACS server.
To install authentication certificates for EAP-TLS, perform the tasks listed in Table 4-6:
Ta b l e 4-6 Installing the Certificate for EAP-TLS
Task From For more information, see...
1. Set the Cisco Unified
Communications Manager date and
time on the phone.
Cisco Unified Wireless IP Phone 7925G
web page
Setting the Date and Time, page 4-19
2. If using the Manufacturing Installed
Certificate (MIC):
a. Export the CA root certificate
and manufacturing CA
certificate.
b. Install certificates on the
Cisco
ACS server and edit the
trust list.
c. Export the CA certificate from
the ACS server and import it to
the phone.
• Cisco Unified Wireless IP Phone
7925G web page
• Internet Explorer
• Microsoft Certificate Services
Exporting and Installing the Certificates
on the ACS, page 4-19
Exporting the CA Certificate from the
ACS Using Microsoft Certificate
Services, page 4-20
To Next Page
Loading...
Need help?
General
