01-13-2015 01:01 PM - edited 03-17-2019 01:34 AM
Dears,
I have 3 below doubts,
01-13-2015 01:17 PM
Hi Clarke,
The basic difference between Restricted and Unrestricted version is that, Unrestricted version Does NOT allow any provision for Secure Cisco Phones / Communications on that cluster (i.e. No Encryption Features allowed) and is intended to be used Only by the countries / organizations that are on the US Sanctions list.
Further more, if you are installing Restricted version of the Software, by default it is Not Secure by any means, it just means that, down the road if you need Encryption (i.e. CTL , VPN etc) you may configure them :-)
More over, if you have got Unrestricted Software and would want to Upgrade to Restricted, you can only do so by Exporting the configuration and installing the same version of the Unrestricted Software, import the same and then do the in-seat upgrade of the Restricted version.
Please find these two attachments which tries to simplify the saga of Restricted vs Unrestricted Softwares
HTH
01-13-2015 08:46 PM
Dear Wilson,
In CUCM/CUC 10.5 does require a etoken (safenet or ActivIdentity,usb etoken ) or without these etoken also we can configure the encryption for the between phones and cucm.
thanks
01-14-2015 12:59 AM
To secure your media you will need Cisco's USB token. Here is the part number.
KEY-CCM-ADMIN-K9
I don't think you can use any other token. If its only signalling you want to secure, all you need is just to use TLS with certificates
01-14-2015 01:25 AM
Hi,
since cucm version 10 USB token is not required. Please see security guide - http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/security/10_0_1/secugd/CUCM_BK_C68276B4_00_cucm-security-guide-100.html
You definitely need restricted version of CUCM.
Best Regards,
Petko
01-14-2015 03:18 AM
Dear Petko,
Can you put on the specific page on the guide where it clearly says that it is not required.
01-14-2015 07:34 AM
Hi Clark,
if you open pdf version of security document look at table 2. Page 4.
"Hardware security tokens are required for only the CTL Client.
The CLI
command set utils ctl does not require hardware security tokens."
Best Regards,
Petko
01-14-2015 12:47 PM
Dear Petko,
Confused how to setup as i am aware for the procedure for etokens such as below.
How will be the procedure when i dont have the etokens ??? Please explain in bullets.
Thanks
01-15-2015 03:39 AM
Hi Clark,
to enable SRTP between phones procedure is like this:
Best Regards,
Petko
01-15-2015 10:49 PM
Dear Petko,
Thanks for the reply and appreciate for being patients and replying to the post.
set the cluster to mixed mode
The above step has to be done by login in the ctl client by publisher ip and enable mixed mode please correct me ??
The CLI command set utils ctl does not require hardware security tokens."
when the above command will be used ???? if i am not wrong after step 2 of your post.
After the command set utils ctl then i hope i shld continue with step 3 of your post.
Thanks
01-17-2015 05:29 AM
Dears,
Anybody can help me out for the query above.
thanks
02-02-2015 02:50 AM
Hi Clark,
I am sorry for my delay. Have you found the answers to your concerns?
Here are the answers of the questions:
utils ctl set-cluster mixed-mode
after this step you can proceed to step 3. CTL file is generated automatically.
I hope now is clear.
Best Regards,
Petko
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide