/mcpPhone Certificate Types A phone certificate is a unique identifier which authenticates phones. It's crucial for security against IP attacks. Phone Certificates are as follows: Table 6: Description Phone Certificates MICs are signed by Cisco Manufacturing CA and we automatically install this certificate in supported Cisco Unified IP Phone. MICs authenticate with CiscoCertificate Authority Proxy Function (CAPF) for Locally Significant Certificates (LSC) installation or download an encrypted configuration file. Cannot use after expiry, as administrators can’t modify, delete, or revoke the certificates. Manufacture Installed Certificate (MIC) Cisco Unified IP Phones require an LSC to operate in secure mode and is used for authentication and encryption. They are signed by CAPF, Online or Offline CA and takes precedence over MIC. After you perform the necessary tasks that are associated with CAPF, this certificate gets installed on supported phones. The LSC secures the connection between Unified Communications Manager and the phone after you configure the device security mode for authentication or encryption. Locally Significant Certificates (LSC) We recommend that you use only MICs for LSC installation. We support LSCs to authenticate the TLS connection with Unified Communications Manager. When phone configurations use MICs for TLS authentication or for any other purpose, we assume no liability as MIC root certificates get easily compromised. Tip Upgrade Cisco Unified IP Phones 6900, 7900, 8900, and 9900 series to use LSCs for a TLS connection to Unified Communications Manager. Remove MIC root certificates from the Unified Communications Manager trust store to avoid possible future compatibility issues. Phone models that use MICs for TLS connection to Unified Communications Manager may not be able to register. Note Administrators should remove the following MIC root certificates from the Unified Communications Manager trust store: • CAP-RTP-001 • CAP-RTP-002 • Cisco_Manufacturing_CA • Cisco_Root_CA_2048 • Cisco_Manufacturing_CA_SHA2 • Cisco_Root_CA_M2 Security Guide for Cisco Unified Communications Manager, Release 15 and SUs 41 Basic System Security Phone Certificate Types