8821 automatic Certificat enrollment

[Daniel Flieth]

Hello,

is there any way to enroll a certificate to a 8821 phone automatically? Or enroll it automatically via console connection?

Best Regards

Daniel

[Mohammed al Baqari]

Hi,

You can use SCEP proxy feature for auto enrollment. See below.

https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cuipph/8800-series/english/adminguide/P881_BK_C136782F_00_cisco-ip-phone-8800_series/P881_BK_C136782F_00_cisco-ip-phone-8811-8841_chapter_01001.html

[Jonathan Schulenberg]

In addition to Mohammed’s excellent response, CUCM 12.5 adds a web enrollment option that would work for any phone that supports LSC, not only the 8821. This would allow you to implement both wired and wireless 802.1x with your existing trust chain.
https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/rel_notes/12_5_1/cucm_b_release-notes-cucm-imp-1251/cucm_b_release-notes-cucm-imp-1251_chapter_010.html#reference_BAC0DDC63B8795D884C3D8D1400C90A4

https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/security/12_5_1/cucm_b_security-guide-1251/cucm_b_security-guide-1251_chapter_011110.html