cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

365
Views
13
Helpful
6
Replies
Highlighted
Beginner

Encrypted phone configuration files

Hi,

How can I Configure encrypted phone configuration files.

I already create a security profile with TFTP encrypted config and a existing certificate (MIC), on the side of the phone configuration I only have to put the certificate (MIC)?

thanks for the help

Fred

Everyone's tags (3)
6 REPLIES 6
Highlighted

Encrypted phone configuration files

Hi

Have you bought/set up the USB security tokens?

I think without those you can sign the configs, but not encrypt.

Aaron

Aaron Please remember to rate helpful posts to identify useful responses, and mark 'Answered' if appropriate!
Highlighted
Beginner

Encrypted phone configuration files

Hi Aoron,

I don't have the security tokens.

So what can I do to protect the 7900 ip phones when they speak in Configure encrypted phone configuration files, what are my options?

best regards

Fred


Highlighted
Hall of Fame Cisco Employee

Encrypted phone configuration files

Without security tokens, nothing from CUCM side, you cannot use authentication nor encryption.

You'll have to rely on securing your network on your switches, ISRs, etc.

Wheh you get tokens, search CCO for "communications manager + security guide" to get all the instructions on how to configure the feature.

HTH

java

if this helps, please rate

www.cisco.com/go/pdihelpdesk

HTH

java

if this helps, please rate
Highlighted
Beginner

Encrypted phone configuration files

Hi Jaime,

then to protect my phones with CUCM 7.1 against the latest vulnerabilities can only disable ssh access and use the security mechanisms as the L2 arp inspection, correct?

best regards

Fred

Highlighted

Encrypted phone configuration files

If you are concerend I would buy the tokens. You need two, they're $99 list price.

Aaron Please remember to rate helpful posts to identify useful responses, and mark 'Answered' if appropriate!
Highlighted
Beginner

Encrypted phone configuration files

Hi Aaron,

Thanks for the advice, but this time I can not make that purchase.

Nevertheless I liked to do everything possible to improve safety in the current infrastructure.

best regards

Fred

CreatePlease to create content
Content for Community-Ad
Future of Work Virtual Summit Day 5

Cisco COVID-19 Survey