1-11
Cisco Unified IP Phone 7975G Administration Guide for Cisco Unified Communications Manager 6.0
OL-12642-01
Chapter 1 An Overview of the Cisco Unified IP Phone
Understanding Security Features for Cisco Unified IP Phones
Overview of Supported Security Features
Table 1-3 provides an overview of the security features that the Cisco Unified IP Phone 7975G supports.
For more information about these features and about Cisco Unified Communications Manager and
Cisco
Unified IP Phone security, refer to Cisco Unified Communications Manager Security Guide.
For information about current security settings on a phone, look at the Security Configuration menus on
the phone (choose Settings > Security Configuration and choose Settings > Device Configuration >
Security Configuration). For more information, see
Chapter 4, “Configuring Settings on the Cisco
Unified IP Phone.”
Note Most security features are available only if a certificate trust list (CTL) is installed on the phone. For
more information about the CTL, refer to “Configuring the Cisco CTL Client” chapter in the Cisco
Unified Communications Manager Security Guide.
Resetting or restoring the phone See the “Resetting or Restoring the
Cisco Unified IP Phone” section on
page 9-15
802.1X Authentication for Cisco
Unified IP Phones
See these sections:
• “Supporting 802.1X
Authentication on Cisco Unified
IP Phones” section on page 1-16
• “802.1X Authentication and
Status” section on page 4-36
• “Troubleshooting Cisco Unified
IP Phone Security” section on
page 9-8
Table 1-2 Cisco Unified IP Phone and Cisco Unified Communications Manager Security Topics
Topic Reference
Table 1-3 Overview of Security Features
Feature Description
Image authentication Signed binary files (with the extension .sgn) prevent tampering with
the firmware image before it is loaded on a phone. Tampering with
the image causes a phone to fail the authentication process and
reject the new image.
Customer-site certificate
installation
Each Cisco Unified IP Phone requires a unique certificate for device
authentication. Phones include a manufacturing installed certificate
(MIC), but for additional security, you can specify in Cisco
Unified
Communications Manager Administration that a certificate
be installed by using the CAPF
1
. Alternatively, you can install an
LSC from the Security Configuration menu on the phone. See the
“Configuring Security on the Cisco Unified IP Phone” section on
page 3-13 for more information.