Cisco Systems OL-14619-01 manual Disabling and Re-Enabling Security, 6-16, Setting, Effect

Chapter 6 Integrating Cisco Unity with the Phone System

Integrating with Cisco Unified Communications Manager (by Using SCCP or SIP)

Table 6-4	Cisco Unified Communications Manager Cluster Security Mode Settings for Voice Messaging Ports
Setting		Effect
Authenticated		The integrity of call-signaling messages will be ensured because they will be connected to Cisco
		Unified CM through an authenticated TLS port. However, the privacy of call-signaling messages will
		not be ensured because they will be sent as clear (unencrypted) text.
		The media stream is not encrypted.
Encrypted		The integrity and privacy of call-signaling messages will be ensured because they will be connected to
		Cisco Unified CM through an authenticated TLS port, and the call-signaling messages will be
		encrypted.
		The media stream can be encrypted.
		Caution Both end points must be registered in encrypted mode for the media stream to be encrypted.
			However, when one end point is set for non-secure or authenticated mode and the other end
			point is set for encrypted mode, the media stream will not be encrypted. Also, if an
			intervening device (such as a transcoder or gateway) is not enabled for encryption, the media
			stream will not be encrypted.

Disabling and Re-Enabling Security

The authentication and encryption features between Cisco Unity and Cisco Unified CM can be enabled and disabled by changing the Cisco Unified CM Cluster Security Mode for all Cisco Unified CM clusters to Non-Secure, and by changing the applicable settings in the Cisco Unified CM Administration.

Authentication and encryption can be re-enabled by changing the Cisco Unified CM Cluster Security Mode to Authenticated or Encrypted.

Note that after disabling or re-enabling authentication and encryption, it is not necessary to export the Cisco Unity server root certificate and copy it to all Cisco Unified CM server.

Multiple Integrations Can Have Different Security Mode Settings

When Cisco Unity is integrated with multiple Cisco Unified CM clusters, each cluster can have a different setting for Cisco Unified CM Cluster Security Mode. For example, Cluster 1 can be set to Encrypted, and Cluster 2 can be set to Non-Secure.

Settings for Individual Voice Messaging Ports

For troubleshooting purposes, authentication and encryption for Cisco Unity voice messaging ports can be individually enabled and disabled. At all other times, we recommend that the Security Mode setting for all voice messaging ports on the Ports tab be the same as the Cisco Unified CM Cluster Security Mode setting on the Servers tab.

	Design Guide for Cisco Unity Release 5.x
6-16	OL-14619-01