Phone Proxy Certificates installed on ASA

[dmckelvey]

When installing the Call Manager Certs on the ASA do you install the CAPF-trust or CallManager-trust certificates to use the Phone provy feature.  For example, there are two sets of CAP-RTP-001.pem so which one do you download in install??  Thanks!

[phooghen]

If you want to authenticate the phone using Manaufacturer Installed Certificate, you have to download Cisco_Manufacturing_CA.pem.

If you want to Authenicate IP phones with a LSC (Local significant Certificate), you have to download the CAPF cetificate.

See http://www.cisco.com/en/US/partner/docs/security/asa/asa83/configuration/guide/unified_comm_phoneproxy.html#wp1419359

[Derek McKelvey]

Yes, I understand that but here are two Cisco_Manufacturing_CA.pem certificates one is associted to CAPF-trust and one is associated to CallManager-trust.

So which one should I use??  Every Cert has to associations...CAPF-trust  and CallManager-trust.

Cisco_Manufacturing_CA
*CAP-RTP-001
*CAP-RTP-002

Thanks!!

[jubetz]

Doesn't matter.  They're both the same.  CUCM has different trust stores for different features.

Best regards,

-Justin