Certificates for authenticating phones via 802.1x

[Patrick Lloyd]

Hi Folks,

Is is possible to configure a phone to authenticate to the network via a certificate which is not the manufacturer's issued certificate?  Can another certificate be pushed from CUCM to the phone to authenticate it?

[hslai · Accepted solution]

ISE can take pretty much any certificate chains, as documented @ Client Certificate Requirements for Certificate-Based Authentication

I have no personal experience with this but the following links might help:

• IP Phone Security and CTL (Certificate Trust List) | IP Telephony | Cisco Support Community
• Q.A for CUCM PHONE CERTIFICATES (LSC/MIC) - Cisco
• High Level View of Certificates and Authorities in CUCM - Cisco