Supported Security Features
The security features protect against several threats, including threats to the identity of the phone and to data.
These features establish and maintain authenticated communication streams between the phone and the Cisco
Unified Communications Manager server, and ensure that the phone uses only digitally signed files.
Cisco Unified Communications Manager Release 8.5(1) and later includes Security by Default, which provides
the following security features for Cisco Unified IP Phones without running the CTL client:
•
Signing of the phone configuration files
•
Phone configuration file encryption
•
HTTPS with Tomcat and other Web services
Secure signaling and media features still require you to run the CTL client and use hardware eTokens.Note
Implementing security in the Cisco Unified Communications Manager system prevents identity theft of the
phone and Cisco Unified Communications Manager server, prevents data tampering, and prevents call signaling
and media stream tampering.
To alleviate these threats, the Cisco IP telephony network establishes and maintains secure (encrypted)
communication streams between a phone and the server, digitally signs files before they are transferred to a
phone, and encrypts media streams and call signaling between Cisco Unified IP Phones.
A Locally Significant Certificate (LSC) installs on phones after you perform the necessary tasks that are
associated with the Certificate Authority Proxy Function (CAPF). You can use Cisco Unified Communications
Manager Administration to configure an LSC, as described in the Cisco Unified Communications Manager
Security Guide. Alternatively, you can initiate the installation of an LSC from the Security Setup menu on
the phone. This menu also lets you update or remove an LSC.
The Cisco Unified IP Phone 8961, 9951, and 9971 uses the phone security profile, which defines whether the
device is nonsecure or secure. For information about applying the security profile to the phone, see the Cisco
Unified Communications Manager Security Guide.
If you configure security-related settings in Cisco Unified Communications Manager Administration, the
phone configuration file contains sensitive information. To ensure the privacy of a configuration file, you
must configure it for encryption. For detailed information, see the “Configuring Encrypted Phone Configuration
Files” chapter in the Cisco Unified Communications Manager Security Guide.
The following table provides an overview of the security features that the Cisco Unified IP Phone 8961, 9951,
and 9971 supports. For more information about these features, Cisco Unified Communications Manager, and
Cisco Unified IP Phone security, see the Cisco Unified Communications Manager Security Guide.
For information about current security settings on a phone, press and choose Administrator Settings >
Security Setup.
Cisco Unified IP Phone 8961, 9951, and 9971 Administration Guide for Cisco Unified Communications Manager
10.0
160
Supported Security Features
To Next Page
Loading...
Need help?
General
