/mcpStep 6 If you chose to use an authentication string, enter the Authentication String in the text box, or click Generate String to have the system generate a string for you. Note Authentication fails if this string isn't configured on the device itself. Step 7 From the remaining fields, configure the key information. For help with the fields, see the online help. Step 8 Click Save. Note Make sure you have configured the devices that use this template with the same authentication method that you assigned in this procedure. Otherwise, device authentication fails. See your phone documentation for details on how to configure authentication for phones. Step 9 Apply the template settings to devices that use this profile. a) Add the Universal Device Template to a Feature Group Template Configuration. b) Add the Feature Group Template to an LDAP Directory Configuration that isn't synced. c) Complete an LDAP sync. The CAPF settings get applied to all synced devices. For details on configuring feature group templates and LDAP directories, see the "Configure End Users" section of System Configuration Guide for Cisco Unified Communications Manager. Update CAPF Settings via Bulk Admin Use Update Phones query of Bulk Administration to configure CAPF settings and LSC certificates for many existing phones in a single operation. If you haven't provisioned the phones, use Insert Phones menu of the Bulk Administration to provision new phones with CAPF settings from a CSV file. See the "Phones Insertions" section of Bulk Administration Guide for Cisco Unified Communications Manager for details on how to insert phones from CSV files. Note Make sure you have configured your phones with the same string and authentication method that you plan to add in this procedure. Else, your phones don't authenticate to CAPF. See your Phone Documentation for details on how to configure authentication on the phone. Procedure Step 1 From Cisco Unified CM Administration, choose Bulk Administration > Phones > Update Phones > Query. Step 2 Use filter options to limit the search to the phones that you want to update and click Find. For example, use Find phones where drop-down list to select all phones, where LSC expires before a specific date or in a specific Device Pool. Step 3 Click Next. Step 4 From the Logout/Reset/Restart section, choose the Apply Config radio button. When the job runs, the CAPF updates get applied to all updated phones. Security Guide for Cisco Unified Communications Manager, Release 15 and SUs 79 Basic System Security Update CAPF Settings via Bulk Admin