Cisco Unified IP Phone Security Features
Implementing security in the Cisco Unified Communications Manager system prevents identity theft of the
phone and Cisco Unified Communications Manager server, prevents data tampering, and prevents call signal
and media stream tampering.
To alleviate these threats, the Cisco IP telephony network establishes and maintains authenticated and encrypted
communication streams between a phone and the server, digitally signs files before they are transferred to a
phone, and encrypts media streams and call signaling between Cisco Unified IP Phones.
The Cisco Unified IP Phone uses the Phone security profile, which defines whether the device is nonsecure,
authenticated, or encrypted. For information on applying the security profile to the phone, see Cisco Unified
Communications Manager Security Guide.
If you configure security-related settings in Cisco Unified Communications Manager Administration, the
phone configuration file contains sensitive information. To ensure the privacy of a configuration file, you
must configure it for encryption. For detailed information, see “Configuring Encrypted Phone Configuration
Files” chapter in Cisco Unified Communications Manager Security Guide.
The following table shows where you can find additional information about security in this and other documents.
Table 2: Cisco Unified IP Phone Security Topics
ReferenceTopic
See Troubleshooting Guide for Cisco Unified
Communications Manager
Detailed explanation of security, including set up,
configuration, and troubleshooting information for
Cisco Unified Communications Manager and Cisco
Unified IP Phones
See Supported Security Features, on page 14Security features supported on the Cisco Unified IP
Phones
See Security Restrictions, on page 22Restrictions regarding security features
See Security Profiles, on page 17View a security profile name
See Authenticated, Encrypted, and Protected Phone
Calls, on page 17
Identify phone calls for which security is
implemented
See these sections:
•
Network Protocols, on page 6
•
Cisco Unified Communications Manager Phone
Addition Methods, on page 38
TLS connection
See Phone Startup Process, on page 36Security and the phone startup process
See Cisco Unified Communications Manager Phone
Addition Methods, on page 38
Security and phone configuration files
Cisco Unified IP Phone 7941G, 7941G-GE, 7942G, 7961G, 7961G-GE, and 7962G Administration Guide for Cisco Unified
Communications Manager 9.0 (SCCP and SIP)
13
Cisco Unified IP Phone
Cisco Unified IP Phone Security Features