Install Locally Significant Certificate
Install Locally Significant Certificate
You can initiate the installation of an Locally Significant Certificate (LSC) from the Security Configuration
menu on the phone. This menu also lets you update or remove an LSC.
Make sure that the appropriate Cisco Unified Communications Manager and the Certificate Authority Proxy
Function (CAPF) security configurations are complete:
• The CTL or ITL file should have a CAPF certificate.
• The CAPF certificate must exist in the /usr/local/cm/.security/certs folder in every server in the cluster.
• The CAPF is running and configured.
For more information, see the Cisco Unified Communications Manager Security Guide.
To configure an LSC on the phone manually, perform the following procedure. Depending on how you have
configured the CAPF, this procedure installs an LSC, updates an existing LSC, or removes an existing LSC.
To configure an LSC on the phone, follow these steps:
Before You Begin
Before You Begin
Procedure
Step 1
Obtain the CAPF authentication code that was set when the CAPF was configured.
Step 2
From the phone, press the Applications Menu button, then choose Settings > Security Configuration.
Note
Step 3
Press **# to unlock settings on the Security Configuration menu.
Note
Step 4
Scroll to LSC and press the Update softkey. The phone prompts for an authentication string.
Step 5
Enter the authentication code and press the Submit softkey.
The phone begins to install, update, or remove the LSC, depending on how the CAPF was configured. During
the procedure, a series of messages appears in the LSC option field in the Security Configuration menu so
that you can monitor progress. When the procedure completes successfully, the phone displays Installed or
Not Installed.
The LSC install, update, or removal process can take a long time to complete. You can stop the process at
any time by pressing the Stop softkey from the Security Configuration menu. (Settings must be unlocked
before you can press this softkey.)
When the phone successfully completes the installation procedure, it displays "Success." If the phone displays
"Failure," the authorization string may be incorrect or the phone may not be enabled for upgrading. Refer to
error messages generated by the CAPF and take appropriate actions.
You can verify that an LSC is installed on the phone by pressing the Applications Menu button, choosing
Settings > Model Information, and ensuring that the LSC setting shows Installed.
Cisco Unified IP Phone 7931G Administration Guide for Cisco Unified Communications Manager 9.0 (SCCP
and SIP)
10
You can control access to the Settings Menu by using the Settings Access field in the Cisco Unified
Communications Manager Administration Phone Configuration Settings window. For more
information, see the Cisco Unified Communications Manager Administration Guide.
If a Settings Menu password has been set up, SIP phones present an "Enter password" prompt after
you enter **#.
Cisco Unified IP Phone Installation
Print Page