/mcp• If you update the CAPF settings in the Phone Configuration window, and no matching profiles are found, Unified Communications Manager creates a new profile and applies that profile to the phone. • If you have configured the device security mode earlier to an upgrade, Unified Communications Manager creates a profile that is based on that model and protocol and applies the profile to the device. • We recommend that you use MICs for LSC installation only. Cisco support LSCs to authenticate the TLS connection with Unified Communications Manager. Since MIC root certificates can be compromised, users who configure phones to use MICs for TLS authentication or for any other purpose do so at their own risk. Cisco assumes no liability if MICs are compromised. • We recommend that you upgrade Cisco IP Phones to use LSCs for TLS connections and remove the MIC root certificates from the CallManager trust store to avoid compatibility issues. Phone Security Profile Settings The following table describes the settings for the security profile for the phone that is running SCCP. Only settings that the selected phone type and protocol support display. Table 25: Security Profile for Phone That Is Running SCCP Description Setting Enter a name for the security profile. When you save the new profile, the name displays in the Device Security Profile drop-down list in the Phone Configuration window for the phone type and protocol. Tip Include the device model and protocol in the security profile name to find the correct profile while searching for a profile or updating a profile. Name Enter a description for the security profile. The description can include up to 50 characters in any language, but it cannot include double-quotes ("), percentage sign (%), ampersand (&), back-slash (), or angle brackets (<>). Description Security Guide for Cisco Unified Communications Manager, Release 15 and SUs 140 Basic System Security Phone Security Profile Settings