/mcpStep 3 To save the root certificate as a file, on the View Root Certificate page, right-click the Right-Click to Save the Certificate as a File link, and select Save Target As. a) In the Save As dialog box, browse to the location where you want to save the Unity Connection root certificate as a file and in the File Name field, confirm that the extension is .pem (rather than .htm) for Cisco Unified CM 5.x or later. Select Save. The certificate must be saved as a file with the correct extension otherwise Cisco Unified CM does not recognize the certificate. Caution b) In the Download Complete dialog box, select Close. The Unity Connection root certificate file is ready to be copied to all Cisco Unified CM servers in this Cisco Unified CM phone system integration. For instructions, see the applicable Cisco Unified CM integration guide at http://www.cisco.com/en/US/products/ps6509/products_installation_and_configuration_guides_list.html. Configuring a SIP Security Profile (Cisco Unified Communications Manager SIP Trunk Integrations Only) The SIP security profile is used only by SIP trunk integrations with Cisco Unified CM 7.0 and later, and is required for authentication of the Unity Connection voice messaging ports. You can change a SIP security profile after it is created. You can delete a SIP security profile when the Cisco Unified CM server is no longer configured for authentication of the Unity Connection voice messaging ports. Adding a SIP Security Profile (Cisco Unified Communications Manager SIP Trunk Integrations Only Step 1 In Cisco Unity Connection Administration, expand Telephony Integrations > Security, and then select SIP Security Profile. The Search SIP Security Profiles page displays the currently configured SIP security profiles. Step 2 Configure a SIP security profile (For information, see Help> This Page): • To add a SIP security profile: On the Search SIP Security Profiles page, select Add New. On the New SIP Security Profile page, in the Port field, enter the port number that the Cisco Unified CM server uses for SIP trunk authentication and encryption of the voice messaging ports. To encrypt the call signaling messages, check the Do TLS check box and select Save. • To edit a SIP security profile: On the Search SIP Security Profiles page, select the name of the SIP security profile that you want to edit. On the Edit SIP Security Profile page, enter the applicable settings and select Save. • To delete a SIP security profile: On the Search SIP Security Profiles page, check the check box next to the display name of the SIP security profile that you want to delete. System Administration Guide 76 Telephony Integration Configuring a SIP Security Profile (Cisco Unified Communications Manager SIP Trunk Integrations Only)