What do you mean you installed LSC certificates on CUCM, because that isn't possible. What you could have done is run the CTL client using the security tokens to get a CTL file on your CUCM. The CTL file contains the CAPF certificate which the phones download (or try to) when they boot up. Having a CTL on the phone allows the phone to secure the CAPF connection to then download it's LSC. Do your phones have an LSC currently? Are they not registering when they have a secure profile set on them, or are you seeing that the device security profile on the device configuration page simply isn't changing (not updating in the database)?
If the problem is that the CCMAdmin webpage isn't showing the correct profile, check replication and/or the BAT logs to see what the job is or isn't doing.
