since Unity Conneciton 11.5SU3 the Encrypted licence is needed to enable security (CUC-PLM-ENC-K9). After uploading the license into PLM I still got an error message while switching the SIP-Trunk to SIP/TLS - SRTP.
Encryption security mode is not supported on this version of Connection. Reconfigure the port group to use Authenticated mode.
Secure RTP is not supported on this version of Connection. Reconfigure the port group to to disable SRTP.
As google was not helping me on this error messages, I will document the solution here.
In addtion to upload the Encryption license you need to enable security on via CLI which is documented in the last chapter of the SU3 Security Guide.
For info : CUC-PLM-ENC-K9 and LIC-UC-ENC are the same license for Encryption, so if you already have this installed on your PLM you can still activate encryption on Unity Connection without the need for LIC-UC-ENC.
You must deploy the Restricted version of Cisco Unity Connection.
Unity Connection must be registered with CSSM or satellite through Export Controlled Functionality enabled Register Token.
Check the status of encryption on Unity Connection using "utils cuc encryption status" CLI command. If the encryption status is disabled for Unity Connection. You must run the "utils cuc encryption enable" CLI command to enable the encryption on Unity Connection.
