McDewey

C H A P T E R 6 Certificate Authority Proxy Function • Certificates Authority Proxy Function Overview, on page 71 • Certificates Authority Proxy Function Configuration Task Flow, on page 73 • Certificates Authority Proxy Function Administration Task Flow, on page 81 • CAPF System Interactions, on page 83 Certificates Authority Proxy Function Overview The Certificate Authority Proxy Function (CAPF) issues Locally Significant Certificates (LSCs) and authenticates endpoints. The CAPF service runs on Unified Communications Manager and performs the following tasks: • Issues LSCs to supported Cisco Unified IP Phones. • Authenticates phones while in mixed mode. • Upgrades existing LSCs for phones. • Retrieves phone certificates for viewing and troubleshooting. CAPF Service Certificate The CAPF service gets automatically installed with the Unified Communications Manager installation and a CAPF-specific system certificate gets generated. The following note is applicable only from Release 14SU2 onwards. Important Security Guide for Cisco Unified Communications Manager, Release 15 and SUs 71