/mcpStep 5 Under Certification Authority Proxy Function (CAPF) Information, check the Certificate Operation check box. Step 6 From the Certificate Operation drop-down list, choose Install/Upgrade to have CAPF install a new LSC certificate on the phone. Step 7 From the Authentication Mode drop-down list, choose how you want the phone to authenticate itself during the LSC installation. Note Configure the same authentication method on the phone. Step 8 Complete one of the following steps if you selected By Authentication String as the Authentication Mode: • Check Generate unique authentication string for each device if you want to use a unique authentication string for each device. • Enter the string in Authentication String text box, or click Generate String if you want to use the same authentication string for all devices. Step 9 Complete the remaining fields in the Certification Authority Proxy Function (CAPF) Information section of the Update Phones window. For help with the fields and their settings, see the online help. Step 10 From the Job Information section, select Run Immediately. Note Select Run Later if you want run the job at a scheduled time. For details on scheduling jobs, see the "Manage Scheduled Jobs" section in Bulk Administration Guide for Cisco Unified Communications Manager. Step 11 Click Submit. Note Apply configurations in the Phones Configuration window for all updated phones if you didn't select the Apply Config option in this procedure. Configure CAPF Settings for a Phone Use this procedure to configure CAPF settings for LSC certificates on an individual phone. Use Bulk Administration or sync LDAP directory to apply CAPF settings to a large number of phones. Note Configure your phone with the same string and authentication method that you plan to add in this procedure. Else, the phone doesn't authenticate itself to CAPF. See your Phone Documentation for details on how to configure authentication on the phone. Procedure Step 1 From Cisco Unified CM Administration, choose Device > Phone. Step 2 Click Find and select an existing phone. The Phone Configuration page appears. Step 3 Navigate to the Certification Authority Proxy Function (CAPF) Information pane. Security Guide for Cisco Unified Communications Manager, Release 15 and SUs 80 Basic System Security Configure CAPF Settings for a Phone