Cisco 8821 EAP-TLS & LSC

[Philippe M]

Hello,

I would like to configure our 8821 phones with EAP-TLS authentication, no problems so far, that works fine with the Manufactured installed certificate... But I don't want to use the MIC for authentication, i wan't to do it with the LSC (who is signed with our organisation PKI)... And that doesn't work, it seems that EAP-TLS authentication using the LSC is not yet supported for the 8821 according to this document : https://www.cisco.com/c/dam/en/us/td/docs/voice_ip_comm/cuipph/8821/english/Deployment/8821_wlandg.pdf , page 127...

Does someone know if EAP-TLS with LSC is however possible ? or if it will be possible in the near future ?

Thanks,

Philippe

[Flavio Miranda]

Hi @Philippe M

LSC is supported with EAP-TLS, even for  Cisco IP Phone, unfortunately is not supported on the model you mention, as you have find out.

https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Security/TrustSec_1-99/IP_Tele/IP_Telephony_DIG.html#pgfId-390540

-If I helped you somehow, please, rate it as useful.-

[Philippe M]

Thanks for your answer Flavio...

Indeed, we already do EAP-TLS with LSC for Cisco 8811 desk phone (802.1x authentication) and that is working really good...

My question was specifically for the Cisco 8821 device...

BR

Philippe

[Saravanan Lakshmanan]

It is not implemented yet on 8821 client-side, follow up and subscribe to add this feature via CSCvc34014 with your Cisco Accounts Team.

[jeff.meyers]

Hi,

Do you have any updates on using a LSC certificate on 8821 ? Roadmap ?

Thanks

[patoberli]

Open a TAC or tell your account manager to add your interest to this feature. Only if enough request it, it will be implemented in a timely fashion.

[PhilippeBLAVIER2315]

We have hundres of 8821's, lack of LSC support with eap-tls is very painfull.

I have made a python script that can push/remove certs from 8821 in bulk, script is shared at https://github.com/philuxe/Cisco-8821-Certificates