/mcpDescription Setting From the drop-down list, choose one of the these values—512, 1024, 2048, 3072, or 4096. RSA Key Size (Bits) From the drop-down list, choose one of the these values—256, 384, or 521. EC Key Size (Bits) This field, which supports all certificate operations, specifies the date and time by which you must complete the operation. The values displayed apply for the first node. Use this setting with the CAPF Operation Expires in (days) enterprise parameter, which specifies the default number of days in which the certificate operation must be completed. You can update this parameter any time. Operation Completes by This field displays the progress of the certificate operation, such as pending, failed, or successful. You cannot change the information that displays in this field. Certificate Operation Status Update CAPF Service Parameters The Service Parameter window contains optional settings for the Cisco Certificate Authority Proxy Function. You can configure settings such as the Certificate Issuer, Online CA connection settings, Certificate Validity duration, and key size for the CAPF certificate. For the CAPF service parameters to display as Active in Cisco Unified Communications Manager Administration, Activate the Certificate Authority Proxy Function service in Cisco Unified Serviceability. If you updated the CAPF service parameters when you used CAPF for the phones, you do not need to update the service parameters again. Tip To update the CAPF service parameters, perform the following procedure: Procedure Step 1 From Cisco Unified Communications Manager Administration, choose System > Service Parameters. Step 2 From the Server drop-down list, choose the server. Tip You must choose the publisher node in the cluster. Step 3 From the Service drop-down list, choose the CiscoCertificate Authority Proxy Function service. Verify that the word “Active” displays next to the service name. Step 4 Update the CAPF service parameters, as described in the Online help. To display help for the CAPF service parameters, click the question mark or the parameter name link. Step 5 For the changes to take effect, restart the Cisco Certificate Authority Proxy Function service in Cisco Unified Serviceability. Security Guide for Cisco Unified Communications Manager, Release 15 and SUs 274 Advanced System Security Update CAPF Service Parameters