Before You Begin, Procedure | Cisco Systems 6921 specification

Chapter

Configuring Security on the Cisco Unified IP Phone

Before You Begin

Make sure that the appropriate Cisco Unified CM and the Certificate Authority Proxy Function (CAPF) security configurations are complete:

•The CTL file should have a CAPF certificate.

•On Cisco Unified Communications Operating System Administration, verify that the CAPF certificate has been installed.

•The CAPF is running and configured.

Refer to Cisco Unified Communications Manager Security Guide for more information.

To manually configure an LSC on the phone, perform these steps:

Procedure

Step 1 Obtain the CAPF authentication code that was set when the CAPF was configured. Step 2 From the phone, choose Applications > Admin Settings > Security Configuration.

Note You can control access to the Administrator Settings Menu by using the Settings Access field in the Cisco Unified Communications Manager Administration Phone Configuration window. For more information, see the Cisco Unified Communications Manager Administration Guide.

Step 3 To unlock settings, see the “Unlocking and Locking Options” section on page 4-3.Step 4 Scroll to LSC and press the Update softkey.

The phone prompts for an authentication string.

Step 5 Enter the authentication code and press the Submit softkey.

The phone begins to install, update, or remove the LSC, depending on how the CAPF was configured. During the procedure, a series of messages appears in the LSC option field in the Security Configuration menu, so you can monitor progress.

The LSC install, update, or removal process can take a long time to complete. You can stop the process at any time by pressing the Stop softkey from the Security Configuration menu. (Settings must be unlocked before you can press this softkey.)

You can verify that an LSC is installed on the phone by choosing Administrator Settings > Phone Information and ensuring that the LSC setting shows Installed.

Related Topic

Understanding Security Features for Cisco Unified IP Phones, page 1-14

	Cisco Unified IP Phone 6921, 6941, 6945, and 6961 Administration Guide for Cisco Unified Communications Manager 8.5 (SCCP and SIP)
3-16	OL-23769-01

Image 72

Cisco Systems 6921 manual Before You Begin, Procedure

Contents

Americas Headquarters Text Part Number OL-23769-01Page N T E N T S Footstand Configuring Features, Templates, Services, and Users Manager How Users Obtain Support for the Cisco Unified IP Phone A-1 Viii Overview AudienceOrganization Chapter Description Related Documentation Cisco Unified IP Phone 6900 Series Document Conventions Cisco Product Security OverviewConvention Description Boldface font Information you must enter is in boldface screen font Italic screen fontYou press the D key An Overview of the Cisco Unified IP Phone Understanding the Cisco Unified IP Phones 6921, 6941, 6945, 1describes the buttons on the Cisco Unified IP Phone Features on the Cisco Unified IP Phone 2describes the buttons on the Cisco Unified IP Phone 6941 Cisco Unified IP Phone 6941 Chapter Features on the Cisco Unified IP Phone 6941 3shows the main components of the Cisco Unified IP Phone 3describes the buttons on the Cisco Unified IP Phone Features on the Cisco Unified IP Phone What Networking Protocols are Used? Networking Protocol Purpose Usage NotesCDP Dynamic Host Configuration Protocol chapter Authentication on Cisco Unified IP Phones sectionDhcp Communications Manager System Guide See the LLDP-MED and Cisco Discovery Protocol White paperNologieswhitepaper0900aecd804cd46d.shtml SIP Communications Manager Security Guide Cisco Unified Communications ManagerSystem Guide Related Topics Feature Overview Configuring Telephony FeaturesRelated Topic Understanding Security Features for Cisco Unified IP Phones Providing Users with Feature Information Refer to the Troubleshooting Guide for Cisco Unified Topic ReferenceCommunications Manager Overview of Supported Security Features Feature DescriptionInformation Access section on Security Profiles section on page 1-18for more information Configuration Menu section on Understanding Security ProfilesIdentifying Encrypted Phone Calls Unified IP Phones section on page 1-21for more information Establishing and Identifying Secure Conference Calls Feature Used Initiator’s PhoneResults of Action Supporting 802.1X Authentication on Cisco Unified IP Phones Overview Security Restrictions Configuring Cisco Unified IP Phones in Cisco Unified CM Communications Manager Features and Services Guide Configuration chapter in the Cisco CommunicationsManager Administration Guide Purpose For More Information Administration Guide Communications Manager Administration GuideCommunications Manager Administration Guide, Cisco Manager Administration Guide, IP Phone Services Communications Manager Administration Guide, End Task Purpose For More InformationUnified Communications Manager Installing Cisco Unified IP Phones See the Providing Power to the Cisco Unified IP PhoneSee the Installing the Cisco Unified IP Phone section See the Footstand section on Refer to Cisco Unified IP Phone 6921, 6941, User Guide for Cisco Unified CommunicationsManager User Guide Administration and System Guides Terminology Differences Chapter Terminology Differences A P T E R Related Topic Providing Power to the Cisco Unified IP Phone Understanding the Phone Startup Process, Network Setup Menu, Power Guidelines Power OutagePower Type Guidelines Understanding Phone Configuration Files Obtaining Additional Information about Power Chapter Understanding Phone Configuration Files Resolving Startup Problems, Understanding the Phone Startup ProcessPurpose Related Topics Adding Phones to the Cisco Unified CM Database Requesting the Configuration File Adding Phones to the Cisco Unified CM DatabaseOther information for the phone Contacting Cisco Unified CM Administration Tool BAT updates information Adding Phones with Auto-RegistrationRequires MAC Method Address? Taps Adding Phones with Cisco Unified CM Administration Adding Phones with Auto-Registration and Taps Using Cisco Unified IP Phones with Different Protocols Adding Phones with BATConverting a New Phone from Sccp to SIP Procedure Deploying a Phone in an Sccp and SIP Environment Determining the MAC Address for a Cisco Unified IP Phone OL-23769-01 Before You Begin Network Requirements Cisco Unified Communications Manager Configuration Network and Access PortsNetwork and Access Ports, Handset, Speakerphone, Headset, Handset SpeakerphoneHeadset Audio Quality Installing the Cisco Unified IP Phone See the Network and Access Ports section onSee the Headset section on page 3-3for supported See the Adding Phones to the Cisco Unified CM Cisco Unified IP Phone 6921 and 6941 Cable Connections Cisco Unified IP Phone 6961 Cable Connections Cisco Unified IP Phone 6945 Cable Connections Reducing Power Consumption on the Phone Footstand Cisco Unified IP Phone 6921 199283 Cisco Higher Viewing Angle Mounting the Phone to the Wall Verifying the Phone Startup ProcessLower Viewing Angle Configuring Startup Network Settings Configuring Security on the Cisco Unified IP PhoneHold Mute Speaker Before You Begin Configuring Settings on the Cisco Unified IP Phone Configuration Menus on the Cisco Unified IP Phone Displaying a Configuration Menu Select Admin SettingsPress the Applications button Unlocking and Locking Options, Editing Values, Network Setup Menu, IPv4 Setup Menu Options, Unlocking and Locking OptionsEditing Values Network Setup Menu Option Description To ChangeSelect Configure both to auto-negotiate ConfigurationPC Vlan System Enterprise Phone IPv4 Setup Menu Options Device Phone PhoneDiscovery protocol, which should match the protocol IPv4 Setup Menu Options Related Topics Security Configuration Menu 802.1X Authentication and StatusDevice Phone Phone Configuration Trust List Menu Choose Applications Admin Settings Security Config 802.1X AuthenticationDevice Authentication Settings Security Configuration Configuring Features, Templates, Services, and Users Feature Description Configuration Reference Choose System Service Parameter and selectSet Builtin Bridge Enable to On Configuration System Enterprise Phone Configuration Device Device SettingsCommon Phone Profile Features and Services Guide, Cisco Call Features and Services Guide, Call DisplayAdministration Guide, Directory Number Forward Maximum Hop Count service parameter Services Guide, Call Park and Directed Call Services Guide, Monitoring and RecordingConfiguring the Phone to Support Call Understanding Directory Numbers Services Guide Unified Communications Manager FeaturesExtension Mobility chapter in the Cisco Services Guide, Cisco Web Dialer CMC Services Guide, Immediate Divert Services Guide, Do Not Disturb Feature, see the Cisco Unified Communications Manager Features and Services Guide, HoldAdministration Guide, Hunt Group Communications Manager Feature Services Guide, IntercomRefer to Cisco Unified Communications Manager System Guide, Cisco Unified IP Features and Services Guide, Malicious Administration Guide, Message WaitingServices Guide, Music On Hold Features and Services Guide Barge Administration Guide, Phone ButtonFeatures and Services Guide, Quality Unified IP Phone 6921, 6941, 6945, Overview of Supported Security Features Administration Guide, ConferenceBridge Configuration Creating Custom Phone Rings section Services Administration Guide, Time Period Administration Guide, Cisco Voice-MailJoin and Direct Transfer Policy Configuring Corporate and Personal Directories Configuring Corporate DirectoriesConfiguring Personal Directory Personal Directory consists of the following features Modifying Phone Button Templates Click Save Configuring Softkey Templates Feature Configuration 6961 Supported as a Softkey on CiscoUnified IP Phone Softkey Template DND Setting Up Services Giving Users Access to the User Options Web Pages Adding Users to Cisco Unified Communications ManagerManaging the User Options Web Pages Click Add Selected Enter the appropriate search criteria and click FindClick Save Selected/Changes Specifying Options that Appear on the User Options Web Pages Configuring the Phone to Support Call Waiting OL-23769-01 Customizing and Modifying Configuration Files Customizing the Cisco Unified IP Phone Creating Custom Phone Rings DistinctiveRingList File Format Requirements Configuring a Custom Phone Ring PCM File Requirements for Custom Ring Types Configuring the Idle Display Field Description Page Model Information Screen Model Information Screen, Status Menu, Status Menu Status Messages Screen Administration section on page 2-10for details Network Setup Menu section on page 4-4forSelect Status Messages Message Description Possible Explanation and Action Address. See the Network Setup Menu section Network Setup Menu section onIf you are using DHCP, check the Dhcp server On page 4-4for details on assigning a static IP Setup Menu section on page 4-4for details on Menu section on page 4-4for details Network Statistics Screen Select Status Network Statistics Call Statistics Screen Port IPv4 Select Status Select Call StatisticsCall Statistics screen displays these items Voice Quality Metrics Security Configuration MOS LQKVoice stream Cisco Unified IP Phone uses Security Configuration screen displays these items OL-23769-01 Monitoring the Cisco Unified IP Phone Remotely Accessing the Web Page for a Phone Http//IPaddress Disabling and Enabling Web Page Access Device InformationChoose Device Phone Network Setup UDI Description Description Network Statistics Lldp Number of Lldp TLVs that are not recognized on the phone Device Logs Streaming Statistics Streaming Statistics Area Items Stream Configuring Settings on the Cisco Unified IP Phone chapter Troubleshooting and Maintenance Resolving Startup Problems Chapter Resolving Startup Problems Identifying Error Messages Verifying DNS Settings Choose Tools Control Center Feature Services Symptom Cisco Unified IP Phone Unable to Obtain IP Address Experiencing problems Cisco Unified IP Phone Resets Unexpectedly Verifying Dhcp SettingsVerifying the Physical Connection Identifying Intermittent Network Outages Checking Static IP Address Settings Verifying the Voice Vlan ConfigurationVerifying that the Phones Have Not Been Intentionally Reset Eliminating DNS or Other Connectivity Errors Troubleshooting Cisco Unified IP Phone Security Checking Power ConnectionProblem Possible Cause General Troubleshooting Tips Summary Explanation Locking Options section on page 4-3 for detailsDisplaying these statistics To resolve this problem, re-enable the port from the switch Halfduxcollisionexceedthreshold Resetting or Restoring the Cisco Unified IP Phone Performing a Basic ResetPerforming a Factory Reset Operation Performing Explanation Monitoring the Voice Quality of Calls Troubleshooting Tips Metric Change Condition Where to Go for More Troubleshooting Information Cleaning the Cisco Unified IP PhoneCisco Unified IP Phone Troubleshooting Resources Chapter Cleaning the Cisco Unified IP Phone Providing Information to Users Via a Website How Users Access a Voice Messaging System How Users Configure Personal Directory Entries Installing the Synchronizer Configuring the Synchronizer Installing the Cisco Unified CM Locale Installer Support for International Call Logging Appendix Support for International Call Logging Physical and Operating Environment Specifications Specification Value or Range Cable Specifications Network and Access Port PinoutsNetwork Port Connector Pin Number Function Access Port Connector Table C-3describes the access port connector pinouts Appendix Network and Access Port Pinouts Basic Phone Administration Steps Example User Information for these Procedures Adding a User to Cisco Unified CM Adding a User From an External Ldap DirectoryChoose System Ldap Ldap Directory Click Perform Full Sync Now Configuring the Phone Proceed to the section Configuring the Phone, page D-3Example doe Appendix Configuring the Phone Appendix Configuring the Phone Performing Final End User Configuration Steps Associate the user with the deviceChoose User Management End User Click Device Associations Installing the Wall Mount Kit for the Cisco Installing the Bracket Figure E-2 Mounting the Wall Bracket Figure E-3 Attaching the Phone Bracket Figure E-4 Preparing the Handset Hook Figure E-5 Attaching the Cables Figure E-6 Attaching the Phone to the Wall Bracket Appendix Installing the Bracket Cisco Unified IP Phone Non-Lockable Wall Mount ADA Non-Lockable Wall Mount Kit for 6900 Series Following figure shows the contents of the Wall Mount kit ComponentsPackage includes these items Install Non-Lockable Wall Mount Kit for Phone Before You Begin Figure F-4 Mount the Wall Bracket Figure F-5 Attach Phone Bracket Proceed to of Installing the Bracket, page E-2 Remove Phone from Non-Lockable Wall Mount Figure F-7 Figure F-8 Feature Support by Protocol for the Cisco Protocol Features Appendix Sccp SIP Tool Barge Access port Numerics Conference joining Configurable call forward display Configuration file Creating Data Vlan Days Backlight Not Active Debug Display web DistinctiveRingList.xml file format Divert Fast dials Address book Fast dial service Feature buttons ApplicationsContacts Navigation Programmable line button Services URL button Hold button, description Shared line Hold reversionSpeed dialing G-4 Host Name Time-of-Day Routing Http IP address, troubleshooting 9-3IPv4 Configuration SW Port Configuration Network Configuration web Cast CDP Dhcp Http Rtcp RTP Sccp SIP Srtp TCP Tftp TLS UDPPrivate Line Automated Ringdown Plar Settings menu access Sccp Secure conference 5-13,G-4 Srst Srtp Status messages Status Messages screen Status Messages webStream 1 web LLDP-MED Time zone update TLS Transfer Transfer button, descriptionVlan Wideband codec XmlDefault.cnf.xml IN-11 IN-12