Cisco 7925G Administration Guide - Page 97

Chapter 4 Using the Cisco Unified Wireless IP Phone 7925G Web Pages Configuring Network Profiles Step 2 Step 3 Step 4 Step 5 Step 6 Under Certificates, click Certificates..., then click the Trusted Root Certification Authorities tab. Highlight the root certificate and click Export.... The Certificate Export Wizard appears. Click Next. At the next window, select DER encoded binary X.509 (.CER), and click Next. Specify a name for the certificate and click Next. Save the CA certificate to be installed on the phone. Requesting and Importing the User Installed Certificate To request and install the certificate on the phone, follow these steps: Procedure Step 1 Step 2 From the phone web page, choose the network profile using EAP-TLS, and select User Installed in the EAP-TLS Certificate field. Click Certificates. On the User Certificate Installation page, the Common Name field should match the user name in the ACS server. Note You can edit the Common Name field if you wish. Make sure that it matches the user name in the ACS server. See "Configuring the ACS Server Setup" section on page 4-22. Step 3 Step 4 Step 5 Step 6 Step 7 Step 8 Step 9 Enter the information to be displayed on the certificate, and click Submit to generate the Certificate Signing Request (CSR). In the next screen, select and copy the entire contents of the text box. Send this data to the CA administrator for signing. The CSR text is encoded and should be sent to the Certificate Authority for signing. The CSR text can be sent by e-mail or another method determined by your CA administrator. The following steps describe the basic CSR approval process on the CA web page. From the Microsoft Certificate Services Request a Certificate page, select Advanced certificate request to initiate the signing request. At the Advanced Certificate Request page, select Submit a certificate request by using a base-64-encoded PKCS CMC. Copy the certificate data from the Cisco Unified Wireless IP Phone 7925G and paste it in the Saved Request text box, then click Submit. Once the CSR is approved, the certificate must be exported in a DER encoded format and sent to the original requestor. Return to the phone web page and choose Certificates to import the signed certificate. On the Certificates page, locate the User Installed certificate line, and click Import. Browse to the certificate on your PC to import to the phone. Installing the Authentication Server Root Certificate The Authentication Server Root Certificate must be installed on the Cisco Unified Wireless IP Phone 7925G. To install the certificate, follow these steps: OL-15984-01 Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1) 4-21