Yes not tokens needed - Sure review this security guide for version 10.0 (there is no security guide specifically for 10.5) couldnt find anywhere.
Cluster Encryption Configuration Through CLI
Through the CLI, you can manage the cluster security mode without using the Cisco CTL Client.
Consider the following points:
- With this option, the CTL file is generated using a CLI instead of through the Cisco CTL Client.
- No hardware tokens are required.
- The CTL file is signed using the CallManager certificate private key.
http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/security/10_0_1/secugd/CUCM_BK_C68276B4_00_cucm-security-guide-100/CUCM_BK_C68276B4_00_cucm-security-guide-100_chapter_0100.html
-Terry
Please rate all helpful posts