Cisco Unified IP Phone security features
Implementing security in the Cisco Unified Communications Manager system prevents identity theft of the
phone and Cisco Unified Communications Manager server, prevents data tampering, and prevents call signaling
and media stream tampering.
To alleviate these threats, the Cisco IP telephony network establishes and maintains secure (encrypted)
communication streams between a phone and the server, digitally signs files before they are transferred to a
phone, and encrypts media streams and call signaling between Cisco Unified IP Phones.
The Cisco Unified IP Phone 8961, 9951, and 9971 uses the phone security profile, which defines whether the
device is nonsecure or secure. For information about applying the security profile to the phone, see the
Cisco
Unified Communications Manager Security Guide
.
If you configure security-related settings in Cisco Unified Communications Manager Administration, the
phone configuration file contains sensitive information. To ensure the privacy of a configuration file, you
must configure it for encryption. For detailed information, see the
“
Configuring Encrypted Phone Configuration
Files
”
chapter in
Cisco Unified Communications Manager Security Guide
.
The following table shows where you can find information about security in this and other documents.
Table 2: Cisco Unified IP Phone and Cisco Unified Communications Manager security topics
Reference
Topic
See the
Cisco Unified Communications Manager Security Guide
.
Detailed explanation of security, including set up,
configuration, and troubleshooting information for
Cisco Unified Communications Manager and Cisco
Unified IP Phones
See
Supported security features, on page 28
.
Security features supported on the Cisco Unified
IP Phone
See
Security Restrictions, on page 34
.
Restrictions regarding security features
Supported security features, on page 28
provides an overview of the security
features that the Cisco Unified IP Phone 8961, 9951, and 9971 supports. For
more information about these features, about Cisco Unified Communications
Manager, and about Cisco Unified IP Phone security, see the
Cisco
Unified Communications Manager Security Guide
.
Viewing a security profile name
See
Secure Phone Calls, on page 31
.
Identifying phone calls for which security is
implemented
See
Network protocols, on page 21
.
Extension Mobility HTTPS Support
See
Network protocols, on page 21
and
Manager Phone Addition Methods, on page 50
.
TLS connection
See
Phone Startup Process, on page 48
.
Security and the phone startup process
Cisco Unified IP Phone 8961, 9951, and 9971 Administration Guide for Cisco Unified Communications Manager 10.0
(SIP)
27
Cisco Unified IP Phone
Cisco Unified IP Phone security features
REVIEW DRAFT - CISCO CONFIDENTIAL
