Cisco 8821

Phone ConfigurationCisco WLAN Configuration
WPA/WPA2 PSKTKIP or AESWPA-PSK or
WPA2-PSK
WPA/WPA2-PSK
For more information, see the Cisco Wireless IP Phone 8821 Series Deployment Guide.
Certificates
The phones support the following certificates.
•
X.509 digital certificate for EAP-TLS or to enable PEAP + Server Validation for WLAN authentication
•
Simple Certificate Enrollment Protocol (SCEP) for certificate enrollment and auto-renewal
•
1024, 2048, 4096 bit keys
•
SHA-1 and SHA-256 signature types
•
DER and Base-64 (PEM) encoding types
•
User Installed Certificate in PKCS #12 format (.p12 or .pfx extension), which also contains the private
key
•
Server (Root CA) Certificate with .crt or .cer extension
You install certificates on the phones in one of these ways:
•
Use the Administration web page. For more information, see Cisco IP Phone Administration Page, on
page 69.
•
Use an SCEP server to manage and install the certificates. For more information, see SCEP Setup, on
page 75
If your users set up their phones themselves and their phones need certificates, you need to give them the type
of certificate when you give them the other configuration settings. If you don't use SCEP for certificate
installation, then you need to install the certificates yourself.
WLANs and Roaming
The wireless phones support Cisco Centralized Key Management (CCKM), a centralized key management
protocol that provides a cache of session credentials on the wireless domain server (WDS).
For details about CCKM, see the Cisco Fast Secure Roaming Application Note at:
http://www.cisco.com/en/US/products/hw/wireless/ps4570/prod_technical_reference09186a00801c5223.html
The phones also support 802.11r. For more information, see the Cisco Wireless IP Phone 8821 Series
Deployment Guide.
Cisco Wireless IP Phone 8821 and 8821-EX Administration Guide for Cisco Unified Communications Manager
28
VoIP Networks
Certificates