Cant change Security Profile for 7937 conference Station

Support Albakom · ‎05-05-2011

I copy the default 7937 non secure profile to a new profile named secure 7937 profile and want to add or change some parameters.

But theres no button or link to do this. CUCM is a 7.1.3. Is the a special access right to do this? I work with CCM Superuser rights now.

phooghen · ‎05-05-2011

If you want to configure a secured profile, you cluster should be at least put in security mixed mode

Check the enterpriseparameter:

Cluster Security Mode:	This parameter indicates the security mode of the cluster. A value of 0 indicates Non Secure (phones will register in non-secure mode [no security]); 1 indicates Mixed (the cluster allows the registration of both secure devices and non-secure devices). Because this parameter is read-only, to change the cluster security mode, you must run the CTL Client plugin. Note: You must restart Cisco CallManager for the parameter change to take effect.
	This is a required field.
	Default: 0
	: Restart Cisco CallManager service for the parameter change to take effect.

Pierre.

Support Albakom · ‎05-05-2011

The enterprise parameter you telled is set to 1.

In addition I can configure secure profiles for a 7911.

If I create a new 7937 security profile for 7937 there're no items I can configure. See Picture

and so it looks from a 7911:

There are ome parameters to change, In case of 7937 is nothing. Is the 7937 not able to handle security and encryption?

phooghen · ‎05-05-2011

Now I understand your issue.
The 7937 phones are not capable of using a secure profile so this is
definitely a known limitation of these phones.

From :

http://www.cisco.com/en/US/docs/voice_ip_comm/cuipph/7937g/6_0/english/administration/guide/37adm60.pdf

Security profiles
Always defines the conference station as nonsecure. See Understanding Security Profiles, page 1-9 for more information