Encrypt VoIP traffic. PKI. Security tokens.

[sergeybondarenko]

Good Afternoon
Please help me.

I have a single site IP telephony infrastructure based on CUCM 8. The topology is attached.

Now I want encrypt VoIP and signaling traffic. As far as I know, it is the CUCM integrated feature and the PKI infrastructure must be deployed.
I read on http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/security/8_5_1/secugd/secuphne.html
this: “Obtain at least two security tokens; the Cisco certificate authority issues these security tokens. The security tokens must come from Cisco. You will insert the tokens one at a time into the USB port on the server/workstation. If you do not have a USB port on the server, you may use a USB PCI card.”. 

Advise me please about the tokens. What kind of? Where I can get them? By what means?
Thank you in advance.

With kindest regards
Sergey Bondarenko

sergey.bondarenko.grey@gmail.com
bondarenkoss@ukr.net
Tel. +38066 315 75 17

[Jaime Valencia · Accepted solution]

Reach either a reseller or Cisco pre-sales and ask them for KEY-CCM-ADMIN-K9=

HTH

java

If this helps, please rate

www.cisco.com/go/pdihelpdesk

[sergeybondarenko]

Thank you javalenc

[Marcel Ammann · Accepted solution]

Hello Sergey,

you need this security Tokens to make the cluster secure:

Cisco USB eToken USB security key
KEY-CCM-ADMIN-K9=

You can buy them at every Cisco Reseller.

Kind regards,

Marcel Ammann

P.S.: Please rate helpful post's

[sergeybondarenko]

Thank you Marcel

[CHARLES HEUPEL]

In regards to the security tokens, do you need 1 token for each server in the cluster?

[Jaime Valencia]

No, you just need 2 tokens per cluster.

HTH

java

If this helps, please rate

www.cisco.com/go/pdihelpdesk