/mcpC H A P T E R 2 An Overview • System Requirements, on page 5 • Best Practices, on page 5 • Common Icons, on page 7 System Requirements The following are the system requirements to authenticate or encrypt the Unified Communications Manager: • Login to Cisco Unified Communications Manager Administration CLI of the Unified Communications Manager publisher and run util ctl command to set the cluster to mixed mode (Secure Mode). • Locally Significant Certificates (LSC) exist in all phones to authenticate the TLS connection with Unified Communications Manager. A few Endpoints also use MICs if the LSC is not present but we always recommend you to use LSCs. Note Best Practices Cisco strongly recommends the following best practices: • Always perform installation and configuration tasks in a secure lab environment before you deploy to a wide-scale network. • Use IPSec for gateways and other application servers at remote locations. Failure to use IPSec in these instances results in session encryption keys getting transmitted in the clear. Warning • To prevent toll fraud, configure conference enhancements that are described in the System Configuration Guide for Cisco Unified Communications Manager. Likewise, you can perform configuration tasks to Security Guide for Cisco Unified Communications Manager, Release 15 and SUs 5


