alert "You have added SSH/Web credentials.." in CUCM

[iptsupport]

Hello ,

We upgraded CUCM from 11.5 to 12.5 SU11 .

now all time that I perform save on CUCM under device phone I got warning

"You have added SSH/Web credentials. It is advisable to enable the TFTP Encrypted Config option on the Phone Security Profile configuration for the endpoint. Otherwise, these credentials can be exposed.
Note: Enabling TFTP Encrypted Config will prevent off-premise MRA devices from completing CAPF operations. These devices will need to be registered on-premise before being deployed over MRA."

any idea?

[Jonathan Schulenberg]

Clear the username and password on the Device Configuration page and ensure your password manager is not auto-filling those fields when hitting save.

Setting local credentials - which are saved clear text in the XML config file unless TFTP encryption is used - enables the SSH server on the phone. There is no legitimate reason to do this unless you’re actively troubleshooting something with TAC.

[b.winter]

I wonder, from where you got the SU11 of 12.5 from? From the blackmarket? ';)'

[Roger Kallberg]

Was just about to ask that as well. ':-D' @b.winter 

@iptsupport FYI The latest published version of 12.5 is SU7.

[iptsupport]

hi ,

it is mistake  12.5 su7.

the version if 12.5