configuring phones and CUCM for SRTP

[Ibrahim Jamil Jamus]

Hi All,

I am trying to find a way to configure Cisco IP phones to register with secure-SIP to CUCM and to use SRTP for media traffic. I found only one way to do so, which includes purchasing tokens from Cisco to generate CTL certificate and change the cluster security mode to mixed mode.

like the article below:

https://supportforums.cisco.com/document/73611/ip-phone-security-and-ctl-certificate-trust-list

I was wondering if there is another way to do so, without the tokens, like using a centralized CA server for the new certificates.

[pkinane]

What version of CUCM?

[pkinane · Accepted solution]

If you have 10.0(1) or higher, you don't need the tokens. Otherwise you do need them.

http://www.cisco.com/c/en/us/support/docs/unified-communications/unified-communications-manager-callmanager/118893-technote-cucm-00.html

---------------------------
Please rate helpful content (i.e. videos, documents, comments). Also, please select the correct answer(s) if any comment(s) answer your question otherwise the questions remains on the support forums as unanswered
---------------------------

[Ibrahim Jamil Jamus]

thank you for your answer.I am testing it in my lab setup currently. I will post the results once done the testing.