Cisco 521SG Administration Guide - Page 169

Provisioning Configuring a Custom Certificate Authority 6 Configuring a Custom Certificate Authority Digital certificates can be used to authenticate network devices and users on the network. They can be used to negotiate IPSec sessions between network nodes. A third party uses a Certificate Authority Certificate to validate and authenticate two or more nodes that are attempting to communicate. Each node has a public and private key. The public key encrypts data. The private key decrypts data. Because the nodes have obtained their certificates from the same source, they are assured of their respective identities. The device can use digital certificates provided by a third-party Certificate Authority (CA) to authenticate IPSec connections. To enable and configure a custom certificate of authority: STEP 1 Click Admin Login > advanced > Voice > Provisioning. STEP 2 In the CA Settings section in Custom CA Check Enable, select yes. STEP 3 In Custom CA RULE, enter the rule in the following format: STEP 4 Click Submit All Changes. General Purpose Parameters The general purpose parameters GPP_* are used as free string registers when configuring the Cisco IP phones to interact with a particular provisioning server solution. The GPP_* parameters are empty by default. They can be configured to contain diverse values, including the following: • Encryption keys • URLs • Multistage provisioning status information • Post request templates • Parameter name alias maps • Partial string values, eventually combined into complete parameter values. Cisco Small Business SPA300 Series, SPA500 Series, and WIP310 IP Phone Administration Guide 168