/mcpProcedure Step 1 From Cisco Unified CM Administration, choose Device > Phone. Step 2 Perform one of the following steps: • Click Add New to create a new phone. • Click Find to search and select an existing phone. Step 3 Select the phone type and protocol and click Next. Step 4 From the Device Security Profile drop-down list, assign the secure profile that you created to the phone. Step 5 Assign values for the following mandatory fields: • MAC address • Device Pool • SIP Profile • Owner User ID • Phone Button Template Step 6 Complete the remaining fields of the Phone Configuration window. For help with the fields and their configuration, see the online help. Step 7 Click Save. Add Secure Phone Profile to a Universal Device Template Use this procedure to assign a TLS-enabled phone security profile to a universal device template. If you have LDAP directory sync configured, you can include this universal device template in the LDAP sync through a feature group template and user profile. When the sync occurs, the secure profile is provisioned to the phones. Procedure Step 1 From Cisco Unified CM Administration, choose User Management > User/Phone Add > Universal Device Template. Step 2 Perform one of the following steps: • Click Add New to create a new template. • Click Find to search and select an existing template. Step 3 For the Name field, enter a name for the template. Step 4 From the Device Pool drop-down list, select a device pool. Step 5 From the Device Security Profile drop-down list, select the TLS-enabled security profile that you created. Note The Phone Security Profile must have been created with Universal Device Template as the device type. Step 6 Select a SIP Profile. Step 7 Select a Phone Button Template. Security Guide for Cisco Unified Communications Manager, Release 15 and SUs 200 Basic System Security Add Secure Phone Profile to a Universal Device Template