08.09.2014 Views

Cisco Unified Wireless IP Phone 7921G Deployment Guide - SWS a.s.

Cisco Unified Wireless IP Phone 7921G Deployment Guide - SWS a.s.

Cisco Unified Wireless IP Phone 7921G Deployment Guide - SWS a.s.

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

Extensible Authentication Protocol – Transport Layer Security (EAP-TLS)<br />

Extensible Authentication Protocol Transport Layer Security (EAP-TLS) is using the TLS protocol with PKI to secure<br />

communications to the authentication server.<br />

TLS provides a way to use certificates for both user and server authentication and for dynamic session key generation.<br />

Either the internal Manufacturing Installed Certificate (MIC) or a user installed certificate can be used for authentication.<br />

EAP-TLS provides excellent security, but requires client certificate management.<br />

Ensure that “Certificate CN Comparison” is selected when enabling EAP-TLS.<br />

EAP-TLS also requires that a user account be created on the authentication server matching the common name of the certificate<br />

imported into the <strong>Cisco</strong> <strong>Unified</strong> <strong>Wireless</strong> <strong>IP</strong> <strong>Phone</strong> <strong>7921G</strong>.<br />

It is recommended to use a complex password for this user account.<br />

<strong>Cisco</strong> <strong>Unified</strong> <strong>Wireless</strong> <strong>IP</strong> <strong>Phone</strong> <strong>7921G</strong> Series <strong>Deployment</strong> <strong>Guide</strong> 16

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!