cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
391
Views
4
Helpful
2
Replies

7921G and EAP-TLS

d-berlinski
Level 1
Level 1

Has anyone been able to import certificates into the phone. I am attempting to install a user certificate that was generated using a CSR from the phone. We are using an ACS 4.0 which passes the cert off to a MS AD server for validation. Any guidance would be appreciated.

2 Replies 2

migilles
Cisco Employee
Cisco Employee

Yes should work fine. When creating the CSR, will need to upload the root cert for the CA that is signing cert. Then upload that signed cert that is in DER format.

Ensure you have created a user account for the common name that you have specified and ensure that CN comparison is enabled for EAP-TLS.

http://www.cisco.com/en/US/docs/voice_ip_comm/cuipph/7921g/6_0/english/administration/guide/7921cfgu.html

http://www.cisco.com/en/US/docs/voice_ip_comm/cuipph/7921g/6_0/english/administration/guide/7921cfgu.html

Hey Guys,

So this does mean by your thread that you can use Microsoft Active Directory to mange phones?

Ie, we dont want to use an ACS internal DB, so we can use AD?

Please confirm?

Many thx

Ken

Review Cisco Networking products for a $25 gift card