McDewey

Multi-vendor documentation library · semantic search · MCP endpoint at /mcp

Page 172

↗ View in doc context
page
172
source
cucm/v15/security-guide/security-guide.md
chunk_id
cucm::v15::security-guide::security-guide::168

• For applications, specify digest credentials in the Application User Configuration window. • For phones that are running SIP, specify the digest authentication credentials in the End User Configuration window. To associate the credentials with the phone after you configure the user, choose a Digest User, in the Phone Configuration window. After you reset the phone, the credentials exist in the phone configuration file that the TFTP server offers to the phone. • For challenges received on SIP trunks, configure a SIP realm, which specifies the realm username (device or application user) and digest credentials. Be aware that the cluster security mode has no effect on digest authentication. Note Digest Authentication for SIP Phones Configuration Task Flow Complete these tasks to configure Digest Authentication for SIP phones. Procedure Purpose Command or Action Assign the digest credentials to the end user whom owns the phone. Assign Digest Credentials to Phone User Step 1 Enable digest authentication in the Phone Security Profile that associates to the phone. Enable Digest Authentication in Phone Security Profile Step 2 In Phone Configuration, assign the user as a digest user. Make sure the digest authentication-enabled security profile is assigned. Assign Digest Authentication to the Phone Step 3 Set the end user digest credentials. End User Digest Credential Settings Step 4 Assign the string for the Realm field that Unified CM uses to challenge a SIP request due to a 401 Unauthorized message. Configure SIP Station Realm, on page 155 Step 5 Assign Digest Credentials to Phone User Use this procedure to assign digest credentials to the end user who owns the phone. Phones use the credentials to authenticate. Procedure Step 1 From Cisco Unified Communications Manager Administration, choose User Management > End User. Step 2 Click Find and choose the end user who owns the phone. Step 3 Enter the credentials in the following fields: Security Guide for Cisco Unified Communications Manager, Release 15 and SUs 154 Basic System Security Digest Authentication for SIP Phones Configuration Task Flow