Make a security profile available to device

Answered Question
Aug 16th, 2010

Hello!  Newbie question here.

I thought I'd try to get a few IP phones configured to encrypt their media streams.  Seems I needed

to create a security profile that the phones could be configured with.  That seemed to work.  But then when I access the phones' device properties page I can not select the security profile.  In fact, I only seem to be able to see one profile in the drop down list.  So how would I make that newly created security profile available?

Thanks

I have this problem too.
0 votes
Correct Answer by Jaime Valencia about 6 years 3 months ago

The whole procedure is here

Configuring the Cisco CTL Client

Before you configure the Cisco CTL Client, verify  that you activated the Cisco CTL Provider service and the Cisco  Certificate Authority Proxy Function service in Cisco Unified  Serviceability. Obtain at least two security tokens; the Cisco  certificate authority issues these security tokens. The security tokens  must come from Cisco. You will insert the tokens one at a time into the  USB port on the server/workstation. If you do not have a USB port on the  server, you may use a USB PCI card.

HTH

java

If this helps, please rate

www.cisco.com/go/pdihelpdesk
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Aaron Harrison Mon, 08/16/2010 - 12:56

Hi

Have you enabled the cluster for security using the CTL Client tool and USB tokens?

Aaron

Correct Answer
Jaime Valencia Mon, 08/16/2010 - 13:07

The whole procedure is here

Configuring the Cisco CTL Client

Before you configure the Cisco CTL Client, verify  that you activated the Cisco CTL Provider service and the Cisco  Certificate Authority Proxy Function service in Cisco Unified  Serviceability. Obtain at least two security tokens; the Cisco  certificate authority issues these security tokens. The security tokens  must come from Cisco. You will insert the tokens one at a time into the  USB port on the server/workstation. If you do not have a USB port on the  server, you may use a USB PCI card.

HTH

java

If this helps, please rate

www.cisco.com/go/pdihelpdesk
davekinsley Mon, 08/16/2010 - 13:19

How / where do I obtain the aformentioned security tokens?  Search Cisco and google don't provide an answer to that.

Sounds like there's a good bit to it.  Clearly I've got to read up on the process - thanks much for the help!

Aaron Harrison Tue, 08/17/2010 - 01:02

Hi

The part number for the tokens is : KEY-CCM-ADMIN-K9=

Basically read the docs as posted by Java, but the basics are that you need two of those tokens, and once you have them you download the CTL  Client app from the CallManager CCMAdmin plugins page where you find RTMT and the other client apps.

There are then lots of extra fun steps for phones, gateways, SRST... basically anything that can terminate voice gets more complicated. It's very important to read the PDFs in detail to ensure you have it done properly.

Regards

Aaron

Please rate helpful posts...

Actions

This Discussion

Related Content