/mcpPurpose Command or Action You can use the SIP Profile setting to configure which devices and device types you want the APIC-EM to manage media flows. Associate the external QoS-enabled SIP Profile to a phone. Assign SIP Profile to Phones, on page 811 Step 6 Configure the APIC-EM Controller Use this procedure on the APIC-EM Controller to add Cisco Unified Communications Manager as a user. APIC-EM's role-based access control feature provides Cisco Unified Communications Manager with access to APIC-EM resources. Procedure Step 1 On the APIC-EM Controller, choose Settings > Internal Users. Step 2 Create a new user with the following role: ROLE_POLICY_ADMIN. Keep track of the username and password that you enter because you must enter identical credentials in Cisco Unified Communications Manager's HTTP Profile window. Step 3 Go to the Discovery tab and add a discovery with CDP or the IP address range of the available devices. Step 4 Select the Device Inventory tab and select the reachable devices. Step 5 Click on Set Policy Tag. Step 6 Create a policy tag and set it for the devices. Step 7 On the EasyQoS tab, select the policy that you created and enable DynamicQoS. Upload APIC-EM Controller Certificate Use this procedure to upload the APIC-EM controller certificate into Cisco Unified Communications Manager. Procedure Step 1 From Cisco Unified OS Administration, choose Security > Certificate Management. Step 2 Click Upload Certificate/Certificate Chain. The Upload Certificate/Certificate Chain popup window appears. Step 3 From the Certificate Purpose drop-down list, choose CallManager-trust. Step 4 Enter a Description for the certificate. Step 5 Click Browse to search for, and select, the certificate. Step 6 Click Upload. Feature Configuration Guide for Cisco Unified Communications Manager, Release 15 and SUs 809 QoS Management Configure the APIC-EM Controller