Q. Are the new Cisco CallManager features automatically turned on in Cisco CallManager 4.0?
A. No, Cisco CallManager can operate in two modes:
1. Non-Secure Mode: default mode after installation.
2. Secure Mode: security features are enabled.
Secure mode is turned on by using a USB eToken and a new CTL Client utility. The eToken contains a Cisco rooted X.509v3 Certificate and is used to generate the CTL file for the phones as well as configuring the security mode of the cluster.
Q. What is the CTL File?
A. The Certificate Trust List file that is sent to the phones that contains a list of devices and credentials that a phone should trust on the network. It contains identity, public key and role information. It is created by CTL Client on admin workstation. It is signed by the USB eToken and loaded to the phone during the TFTP process.
Q. Do I have to have an eToken to enable Security functionality in CallManager?
A. Yes, an eToken is required to turn on security functionality.
Q. Are eTokens shipped with CallManager 4.0?
A. No, A USB eToken can be purchased separately that will contain a Cisco rooted X.509v3 Certificate. The part number for the USB eToken is KEY-CCM-ADMIN-K9=.
Look at this URL for more information:
http://www.cisco.com/en/US/products/sw/voicesw/ps556/products_administration_guide09186a00801ed394.html#1037433
HTH
D
