Authentication Options for Cisco IP Phone Services

[vivia11]

Hi,

I'm looking for possible ways a 8861 Cisco IP Phone can identify itself to a web server (where I'm running my script to push a Cisco XML object to the phone) and for ways the web server can authenticate itself to the Cisco IP Phone.

1. Is it possible to install a certificate on the phone and have the phone present it to my web server? I understand that the reverse is not possible.

2. Other than a hard coded user:pwd combination in the URL or script, what other options are possible to authenticate the client to the phone? I'd rather not have an end user type in their username/password every time they want to run the script...

Any suggestions/possibilities are welcome!

Thank you

[dstaudt]

When configuring the URL of the IPPS service in CUCM, you can include a macro #DEVICENAME# in the URL, which will be substituted by the phone with its unique device name (i.e. SEP[Mac]) at run time.  For example, something like:

http://myservice/endpoint?phone=#DEVICENAME#

which would be sent to the server by the phone as

http://myservice/endpoint?phone=SEP123456789012

this formulation can be used any place where the phone ends up making an IPPS HTTP request - e.g. as the target of a custom soft key.

For details see the 'Service URL' section here: Cisco Unified IP Phone Services Application Development Notes for Cisco Unified Communications Manager and Multiplatform