cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
277
Views
0
Helpful
2
Replies

CM4.1 security w/o USB tokens

aobszynski
Level 1
Level 1

Is there any way to use for demonstration proposes a CM4.1 with security functions w/o ordering hardware USB tokens ?

If no. Whan kind of other tokens are accepted ?

(ordering from cisco process may took to long in some cases)

2 Replies 2

Hin Lee
Cisco Employee
Cisco Employee

I think you are asking about the Unity VM security token. The USB key was used prior to Unity 4.x.

In Unity 4.x, a license file is used. See http://www.cisco.com/en/US/products/sw/voicesw/ps2237/products_qanda_item09186a008011a6c5.shtml The demo license is included.

You can install all unity version in demo mode.

I'm not writing about old unity licensing.

This is CM security features...

Look here, i paste also main point

http://www.cisco.com/en/US/products/sw/voicesw/ps556/products_qanda_item09186a00801f8e18.shtml

Q. Are the new Cisco CallManager features automatically turned on in Cisco CallManager 4.0?

A. No, Cisco CallManager can operate in two modes:

1. Non-Secure Mode: default mode after installation.

2. Secure Mode: security features are enabled.

Secure mode is turned on by using a USB eToken and a new CTL Client utility. The eToken contains a Cisco rooted X.509v3 Certificate and is used to generate the CTL file for the phones as well as configuring the security mode of the cluster.

Q. What is the CTL File?

A. The Certificate Trust List file that is sent to the phones that contains a list of devices and credentials that a phone should trust on the network. It contains identity, public key and role information. It is created by CTL Client on admin workstation. It is signed by the USB eToken and loaded to the phone during the TFTP process.

Q. Do I have to have an eToken to enable Security functionality in CallManager?

A. Yes, an eToken is required to turn on security functionality.

Q. Are eTokens shipped with CallManager 4.0?

A. No, A USB eToken can be purchased separately that will contain a Cisco rooted X.509v3 Certificate. The part number for the USB eToken is KEY-CCM-ADMIN-K9=.