Encrypted Media (by LSC) with Jabber on MacOs

[dueddi04]

Dear community,
I'm not a Mac user and I was unable to find any documentation or good summary (like the post Encrypted Media with Jabber on Windows 7) about how LSC encryption key and certificate are handled (storage, export, secured) and/or possibly roamed (for multi-login and multi device users) on MacOs (after the deployment from CUCM).

Could someone suggest some links or similar.

thanks in advance,

[chicoume]

I am a mac user but am not familiar at all with encryption and certificates. 

I have a user that wanted to be able to use Jabber on his laptop. It was already running on his desktop computer. Instead of asking the cucm guys to push a new certificate I spend a good amount of time looking around the keychain for a certificate that I never found. Instead the two relevant entries seem to be com.cisco.jabber.SecurePhone.KEY and com.cisco.jabber.SecurePhone.LSC in the login keychain.

Problem is you cannot export those.

The only way I found was to copy the login keychain from the user's library to a usb key, rename it, add it on the laptop with keychain access, copy the two relevant entries and voila.

I guess this could also work if we were using the keychain in icloud, but in an enterprise it's a big nono.

If anyone has any input on a better way to manage this on mac, feel free to let me know.

Thanks a lot

[Jonathan Schulenberg]

This may be an opportune time to look at CUCM and Jabber 12.5, both of which added support for OAuth tokens as a substitution/replacement for the CAPF enrollment and LSC to support encrypted security profiles. Since the End User can have multiple OAuth tokens this would obviate the certificate roaming challenge.

https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/admin/12_5_1/featureConfig/cucm_b_feature-configuration-guide-1251/cucm_b_feature-configuration-guide-1251_chapter_0110100.pdf