User's Manual

4-39
Cisco Unified IP Phone Administration Guide for Cisco Unified Communications Manager 8.6 (SCCP and SIP)
OL-23091-01
Chapter 4 Configuring Settings on the Cisco Unified IP Phones
Security Configuration Menu
Security Configuration Menu
The Security Configuration that you access directly from the Settings menu provides information about
various security settings. This menu also provides access to the L Trust List menu. The Trust List menu
indicates if the CTL file or the ITL file is installed on the phone.
Table 4-20 describes the options in this menu.
Note The phone also has a Security Configuration menu that you access from the Device menu. For
information about the security options on that menu, see Security Configuration Menu, page 4-32.
Ta b l e 4-20 Security Menu Settings
Option Description To Change
Web Access Enabled Indicates whether web access is enabled (Yes) or
disabled (No) for the phone.
For more information, see Disabling and Enabling
Web Page Access, page 7-3.
Security Mode Displays the security mode that is set for the
phone.
From Cisco Unified Communications Manager
Administration, choose Device > Phone > Phone
Configuration.
MIC Indicates whether a manufacturing installed
certificate (used for the security features) is
installed on the phone (Yes) or is not installed on
the phone (No).
For information about how to manage the MIC for
your phone, see
Using the Certificate Authority
Proxy Function in Cisco Unified Communications
Manager Security Guide.
LSC Indicates whether a locally significant certificate
(used for the security features) is installed on the
phone (Yes) or is not installed on the phone
(No).
For information about how to manage the LSC for
your phone, see
Using the Certificate Authority
Proxy Function in Cisco Unified Communications
Manager Security Guide.
CTL File Displays the MD5 hash of the certificate trust list
(CTL) file that is installed in the phone, and
provides access to the CTL File submenu. If no
CTL file is installed on the phone, this field
displays No. If security is configured for the
phone, the CTL file installs automatically when
the phone reboots or resets.
For more information about this file, see
Configuring the Cisco CTL Client in Cisco
Unified Communications Manager Security
Guide.)
If a CTL file is installed on the phone, also
provides access to the CTL File screen. For more
information, see
CTL File Submenu, page 4-40.
Trust List The Trust List is a top-level menu that provides
submenus for the CTL, ITL, and Signed
Configuration files.
The CTL File submenu displays the contents of
the CTL file. The ITL File submenu displays
contents of the ITL file. The CTL File and ITL
File submenus also display the MD5 hash of the
file. The MD5 hash value from the phone can be
compared with the MD5 hash value of the file
from the TFTP server to verify if the correct file
is installed on the phone.
The Signed Configuration File submenu displays
the SRST certificate that is installed via the
authenticated digitally signed configuration file.
For more information, see Trust List Menu,
page 4-43.