The step by step procedure covers that part.  Look for the "Create the VPN trustpoint and generate self-signed certificate" and "Export the VPN certificate and upload to CUCM" sections.Is that what you are looking for?John

The phone needs to register to CallManager in order for it to get the VPN cert.  That's the key.  If you can do so using NAT, then it should work.John

Hi Haitham,Unfortunately the only way to get the VPN cert on the phone is to register the phone to the CallManager first.The only time I've seen someone configure the phone for VPN while it was remote, was by first registering the phone via ASA Phone...

Hi Sebastian,The biggest issue I've seen with Microsoft and 802.1x is CSCsr71675.Basically Mircosoft only allows a 20 character user name.  The user name of the phone comes in the following format.CP-7961G-GW-SEP001E7AC40641This exceeds the 20 charac...

Hi karthikeyanm,It looks like the tftp service is unable to create a listening socket for some reason.  Could be OS or hardware related.  Not sure.  This is the first time I've seen someone get this error.It looks like you opened a TAC case on this. ...