Cisco Unified Wireless IP Phone 7925G, 7925G-EX, and 7926G Web Pages
b) From Internet Explorer, install certificates on the Cisco ACS server and edit the trust list.
c) From Microsoft Certificate Services, export the CA certificate from the ACS server and import it to the
phone.
For more information, see:
•
•
Step 3
If using a user installed certificate, from phone web page:
a) Generate the Certificate Signing Request (CSR).
b) Send the CSR to CA to sign.
c) Import the certificate.
d) Install certificate on the Cisco ACS server and edit the trust list.
e) Download the CA certificate from the ACS server and import it into the phone.
For more information, see
Step 4
Using the ACS configuration tool, set up the user account.
For more information, see:
•
Set Up ACS User Account and Install Certificate, on page 90
• User Guide for Cisco Secure ACS for Windows
Set Date and Time
EAP-TLS uses certificate-based authentication that requires the internal clock on the Cisco Unified Wireless
IP Phone to be set correctly. The date and time on the phone might change when it is registered to Cisco Unified
Communications Manager.
If a new server authentication certificate is being requested and the local time is behind the Greenwich
Note
Mean Time (GMT), the authentication certificate validation might fail. Cisco recommends that you set
the local date and time ahead of the GMT.
To set the phone to the correct local date and time, follow these steps.
Procedure
Step 1
Select Date & Time from the left navigation pane.
Step 2
If the setting in the Current Phone Date & Time field is different from the Local Date & Time field, click Set
Phone to Local Date & Time.
Step 3
Click Phone Restart, and then click OK.
Export and Install Certificates on ACS, on page 88
Export CA certificate from ACS using Microsoft Certificate Services, on page 88
Request and Import User-Installed Certificate, on page
Cisco Unified Wireless IP Phone 7925G, 7925G-EX, and 7926G Administration Guide
Wireless Security Credentials
89.
87