I havent done this first hand but it sounds like this change is not supported from the CLI but do it using the GUI.
http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/connection/10x/security/guide/10xcucsecx/10xcucsec040.html
Please rate useful posts.