/mcpNMAP DP scan can take up to 18 hours to complete. Note Syntax nmap -n -vv -sU -p <port_range> <ccm_ip_address> where: -n: No DNS resolution. Tells NMAP to never do reverse DNS resolution on the active IP addresses that it finds. Because DNS can be slow even with the NMAP built-in parallel stub resolver, this option can slash scanning times. -v: Increases the verbosity level, which causes NMAP to print more information about the scan in progress. The system shows open ports as they are found and provides completion time estimates when NMAP estimates that a scan will take more than a few minutes. Use this option twice or more for even greater verbosity. -sU: Specifies a UDP port scan. -p: Specifies which ports to scan and overrides the default. Be aware that individual port numbers are acceptable, as are ranges that are separated by a hyphen (for example 1-1023). ccm_ip_address: IP address of Cisco Unified Communications Manager Autoregistration The system supports autoregistration in both mixed mode and nonsecure mode. The default configuration file will also be signed. Cisco IP Phones that do not support Security by Default will be served a nonsigned default configuration file. Migrate IP Phones Between Clusters with Cisco Unified Communications Manager and ITL Files Unified Communications Manager 8.0(1) and later introduced the new Security By Default feature and the use of Initial Trust List (ITL) files. With this new feature, you must be careful when moving phones between different Unified CM clusters and ensure that you follow the proper steps for migration. Failure to follow the proper steps may lead to a situation where thousands of phones must manually have their ITL files deleted. Caution Cisco IP Phones that support the new ITL file must download this special file from their Unified CM TFTP server. Once an ITL file is installed on a phone, all future configuration files and ITL file updates must be signed by one of the following items: • The TFTP server certificate that is currently installed on the phone or • A TFTP certificate that can be validated TVS services on one of the clusters. You can find the certificates of TVS services within the cluster listed in the ITL file. Security Guide for Cisco Unified Communications Manager, Release 15 and SUs 19 An Introduction to Unified CM Security Autoregistration