For the phone-proxy to works properly does i need to put a certificate on the IP Phones?
The Locally Significant Certificate must be manually installed on the IP Phone. Installing the LSC requires the use of at least two USB eTokens and the CTL Client. The CTL Client is used to generate the necessary certificates on the CallManager. Once the CTL Provider and CAPF Services are activated on the cluster, the CTL Client can be run to generate the CTL file on the CallManager. Once this process completes it is then possible to set the "Certificate Operation" on the IP Phone to "Install/Upgrade" through the CCMAdmin Interface. This process must be used for all 7940/60 and older model IP Phones. Without the USB eToken and the CTL Client there is no way to install LSCs on IP Phones. The Part number for the USB eToken is: KEY-CCM-ADMIN-K9=
Note: Even if LSCs are deployed, the hard phone must first register and authenticate with a MIC since the phone-proxy does NOT allow auto-registration.
Yes all phones used with phone proxy require certificates (either a MIC or LSC). 7940/7960 phones are the only ones I know of that do not come with Manufacture Installed Certificates (MICs), so you would have to push a Locally Significant Certificate (LSC) to those phone models. Anything newer like a 7941/61/70 comes with a MIC so those phones are ready to use with the phone proxy right out of the box if you want to use MICs instead of LSCs for authentication.
You also do not need to have the USB e-tokens to pass LSCs to the phones. Here's how to do this so you don't have to purchase the e-tokens: https://supportforums.cisco.com/docs/DOC-12963. Note that if you want to encrypt phones or pass LSCs to phones without locally (not behind an ASA) you would need the USB e-tokens.
SIP traces provide key information in troubleshooting SIP Trunks, SIP
endpoints and other SIP related issues. Even though these traces are in
clear text, these texts can be gibberish unless you understand fully
what they mean. This document attempts to br...
Please find the attached HTML document, download and open it on your PC.
This provides an easy to use form where you simply answer a few
questions and it will render the proper jabber-config.xml file for you
to copy/paste. There is built in logic to verif...
CUCM Database Replication is an area in which Cisco customers and
partners have asked for more in-depth training in being able to properly
assess a replication problem and potentially resolve an issue without
involving TAC. This document discusses the bas...