Cisco 7925G - Unified Wireless IP Phone VoIP Instruction Manual

Cisco Unified Wireless IP Phone
•Phone Overview, page 1
•Cisco Unified Wireless IP Phone 7925G, 7925G-EX, and 7926G, page 1
•Bluetooth Technology, page 10
•Feature Support, page 12
•Security Features, page 14
•Cisco Unified Wireless IP Phone 7925G, 7925G-EX, and 7926G Deployment, page 19
Phone Overview
The Cisco Unified Wireless IP Phone 7925G, 7925G-EX, and 7926G provides wireless voice communication
over an IP network. As with traditional analog telephones, you can place and receive phone calls and access
features such as hold, transfer, and speed dial. In addition, because the phone connects to your wireless local
area network (WLAN), you can place and receive phone calls from anywhere in your wireless environment.
For information about the phones and accessories, see the following documents:
•Cisco Unified Wireless IP Phone 7925G, 7925G-EX, and 7926G User Guide
•Cisco Unified Wireless IP Phone 7925G, 7925G-EX, and 7926G Accessory Guide
Cisco Unified Wireless IP Phone 7925G, 7925G-EX, and 7926G
This section describes the phone components.
Cisco Unified Wireless IP Phone 7925G and 7926G
The Cisco Unified Wireless IP Phone 7925G and 7926G are 802.11 dual-band wireless devices that provide
comprehensive voice communications in conjunction with Cisco Unified Communications Manager and with
Cisco Aironet 802.11b/g and Cisco Aironet 802.11a access points (APs) in a private business communications
network.
Cisco Unified Wireless IP Phone 7925G, 7925G-EX, and 7926G Administration Guide
1

The phone is a qualified Bluetooth wireless device (Qualified Device ID [QDID] B014396). The phone
provides voice communication over the same wireless LAN that your computer uses, allowing you to place
and receive phone calls, put calls on hold, transfer calls, make conference calls, and so on.
The following figure shows the Cisco Unified Wireless IP Phone 7925G. The Cisco Unified Wireless IP
Phone 7926G looks similar.
This phone model, like other network devices, must be configured and managed. This phone encodes G.711a,
G.711u, G.729a, G.729ab, and G.722/iLBC codecs, and decodes G.711a, G711b, G.711u, G.729, G729a,
G729b, and G729ab codecs. The phone also supports uncompressed wideband (16 bits, 16 kHz) audio.
The Cisco Unified Wireless IP Phone 7925G and 7926G is hearing aid compatible (HAC) but do not have
any TTY features. They have a centered “dot”or “nib”on the 5 key that is a tactile identifier.
The physical characteristics include:
•Resistance to damage from dropping the phone
•Tolerance of antibacterial and alcohol-based wipes
•Latex- and lead-free
•Resistance against liquid splashes
•Dust resistance
•Shockproof and vibration-proof
•USB 1.1 interface
In addition to basic call-handling features, your phone can provide enhanced productivity features that extend
your call-handling capabilities.
Depending on the configuration, your phone supports:
•Use of Bluetooth wireless headsets, including certain hands-free call features
Cisco Unified Wireless IP Phone 7925G, 7925G-EX, and 7926G Administration Guide
2
Cisco Unified Wireless IP Phone
Cisco Unified Wireless IP Phone 7925G and 7926G

•Wireless access to your phone number and the corporate directory
•A local phone book that can store up to 200 contacts and speed-dial hot keys that can be assigned to
phone book contacts
•Access to network data, XML applications, and web-based services
•Online customizing of phone features and services from your User Options web pages
•An online help system that displays information on the phone screen
The Cisco Unified Wireless IP Phone 7926G contains a bar code scanner.
Cisco Unified Wireless IP Phone 7925G-EX
Your Cisco Unified Wireless IP Phone 7925G-EX is an Atmospheres Explosibles (ATEX) Zone 2/Class 22
and Canadian Standards Association (CSA) Division 2/Class 1 certified full-feature telephone. The phone is
certified for use in potentially explosive environments in the gas, oil, and chemical production fields as well
as dust-filled environments. The phone has Ingress Protection 64 (IP 64) level protection, indicating dust-tight
equipment that is protected against splashing water. The phone has an industry-standard yellow styling that
offers fast recognition in emergency situations.
The phone is a qualified Bluetooth wireless device (Qualified Device ID [QDID] B014396). The phone
provides voice communication over the same wireless LAN that your computer uses, allowing you to place
and receive phone calls, put calls on hold, transfer calls, make conference calls, and so on.
The following figure shows the Cisco Unified Wireless IP Phone 7925G-EX.
This phone model, like other network devices, must be configured and managed. This phone encodes G.711a,
G.711u, G.729a, G.729ab, and G.722/iLBC codecs, and decodes G.711a, G711b, G.711u, G.729, G729a,
G729b, and G729ab codecs. The phone also supports uncompressed wideband (16 bits, 16 kHz) audio.
Cisco Unified Wireless IP Phone 7925G, 7925G-EX, and 7926G Administration Guide
3
Cisco Unified Wireless IP Phone
Cisco Unified Wireless IP Phone 7925G-EX

The Cisco Unified Wireless IP Phone 7925G-EX is hearing aid compatible (HAC) but does not have any TTY
features. It also has a centered “dot”or “nib”on the 5 key that is a tactile identifier.
The physical characteristics include:
•Atmospheres Explosibles (ATEX) Zone 2/Class 22 certification prevents ignition of surrounding gas
vapors by the phone.
•Canadian Standards Association (CSA) Division 2/Class 1 certification provides access to mobile
collaborative communications.
•Industry-standard yellow styling offers fast recognition in emergency situations.
•Ingress Protection 64 (IP 64) level protection, indicating dust-tight equipment which is protected against
splashing water.
•The large 2-inch color (176 x 220 pixels) display makes viewing easy.
•Resistance to damage from dropping the phone.
•Tolerance of antibacterial and alcohol-based wipes.
•Latex- and lead-free.
•Shockproof and vibration-proof.
•USB 1.1 interface.
ATEX Zone 2 certification: Zone 2 is defined as an area in which an explosive gas atmosphere is not
likely to occur in normal operation and if it does occur, is likely to do so only infrequently and will exist
for a short period only (for example, less than 10 hours per year).
Note
CSA Class 1 Division II certification: Class 1 is a location where a quantity of flammable gas or vapor
sufficient to produce an explosive or ignitable mixture may be present in the air. Division II is a location
where a classified hazard does not normally exist but is possible under abnormal conditions.
Note
In addition to basic call-handling features, your phone can provide enhanced productivity features that extend
your call-handling capabilities.
Depending on the configuration, your phone supports:
•Use of Bluetooth wireless headsets, including certain hands-free call features
•Wireless access to your phone number and the corporate directory
•A local phone book that can store up to 200 contacts and speed-dial hot keys that can be assigned to
phone book contacts
•Access to network data, XML applications, and web-based services
•Online customizing of phone features and services from your User Options web pages
Cisco Unified Wireless IP Phone 7925G, 7925G-EX, and 7926G Administration Guide
4
Cisco Unified Wireless IP Phone
Cisco Unified Wireless IP Phone 7925G-EX

Buttons and Hardware
The following figure shows the Cisco Unified Wireless IP Phone 7926G. The Cisco Unified Wireless IP
Phone 7925G and 7925G-EX are similar in appearance to the Cisco Unified Wireless IP Phone 7926G. The
following table describes the functions of the keys on the phones.
Provides these indications:Indicator light (LED)1
•Solid red: Phone is connected to AC power source and battery is
charging.
•Solid green: Phone is connected to AC power source and battery
is fully charged.
•Fast blinking red: There is an incoming call. Phone can be charging
or fully charged.
•Slow blinking red: There is a voice message. When phone is
connected to AC power source, the red light displays longer than
when using only the battery.
•Slow blinking green (every 2 seconds): Phone is using only battery
power. Phone is registered with the wireless network and is within
service coverage area.
Port for plugging in a headset or ear bud has a protective cover.Headset port with cover2
Cisco Unified Wireless IP Phone 7925G, 7925G-EX, and 7926G Administration Guide
5
Cisco Unified Wireless IP Phone
Buttons and Hardware

Toggles the speaker mode on or off for the phone.Speaker button3
Activates the Options menu for access to the list of softkeys. Sometimes
displays a softkey label.
Right softkey button4
Accesses these menus and lists from the main screen:Navigation button5
Directory
Line View
Settings
Services
Allows you to scroll up and down menus to highlight options and to move
left and right through phone numbers and text entries.
Activates the Help menu from the main screen.Select button6
Allows you to select a menu item, a softkey, a call, or an action.
Turns the phone on or off, ends a connected call, or silences the ring
during an incoming call.
Power/End button (red)7
When you use menus, acts as a shortcut to return to the main screen.
Allows you to lock the keypad.Pound (#) key8
Allows you to enter these special characters when you are entering text:
# ? ( ) [ ] { }
Enters “0”when you dial a number. Allows you to enter a space or these
special characters when you are entering text: ,.‘ “ | _ ~ ’
Zero (0) key9
Toggles between ring and vibrate mode.Asterisk (*) key10
Allows you to enter these special characters when you are entering text:
* + - / = \ : ;
Allows you to dial numbers, enter letters, and choose menu items by
number.
Keypad11
Enters “1”when you dial a number. Allows you to access voice mail.
One (1) key12
Allows you to enter these special characters when you are entering text:
! @ < > $ % ^ &
Cisco Unified Wireless IP Phone 7925G, 7925G-EX, and 7926G Administration Guide
6
Cisco Unified Wireless IP Phone
Buttons and Hardware

Allows you to answer a ringing call or, after dialing a number, to place
the call.
Answer/Send button
(green)
13
Activates the softkey option displayed on the screen.Left softkey button14
When you set it up, allows you to directly access your messages or open
the Phone Book when the phone is idle.
Toggles the mute feature on or off.Mute button15
When the phone is idle, allows you to control the ring volume, turn on
the vibrate option, or turn off the ring.
Volume button16
When an incoming call is ringing, allows you to press this button once
to silence the ring for the call.
During a call, allows you to control the speaker volume for the handset,
headset, and speaker mode.
When the phone is docked in the desktop charger, the volume button on
the phone controls the volume of the charger speaker.
Use with XML applications, such as Push to Talk or other services.Application button17
Use with Java MIDlet applications to allow you to scan bar codes.Bar code scanner18
Available only on the Cisco Unified Wireless IP Phone
7926G.
Note
Cisco Unified Wireless IP Phone 7925G Desktop Charger Overview
The Cisco Unified Wireless IP Phone 7925G Desktop Charger provides the following features:
•Charges the docked phone battery from line power
•Contains a speakerphone, with the volume controlled by the phone volume buttons
•Supports Bluetooth through the speakerphone
•Displays status information using the Power/Bluetooth Status LED and Battery LED
•Contains an additional port at the back of the station for charging a spare battery
•Works on line power or from the spare battery for the phone
Cisco Unified Wireless IP Phone 7925G, 7925G-EX, and 7926G Administration Guide
7
Cisco Unified Wireless IP Phone
Cisco Unified Wireless IP Phone 7925G Desktop Charger Overview

The following figure shows the Cisco Unified Wireless IP Phone 7925G docked in the Cisco Unified Wireless
IP Phone 7925G Desktop Charger.
Figure 1: Cisco Unified Wireless IP Phone 7925G docked in the charger
The Cisco Unified Wireless IP Phone 7925G Desktop Charger supports the following phones:
•Cisco Unified Wireless IP Phone 7925G
•Cisco Unified Wireless IP Phone 7925G-EX
•Cisco Unified Wireless IP Phone 7926G
The two LEDs on the Cisco Unified Wireless IP Phone 7925G Desktop Charger change color, as described
in the following table.
Cisco Unified Wireless IP Phone 7925G, 7925G-EX, and 7926G Administration Guide
8
Cisco Unified Wireless IP Phone
Cisco Unified Wireless IP Phone 7925G Desktop Charger Overview

MeaningFlash rateColorLED
The charger is not plugged into line power.SolidUnlitPower/Bluetooth
Status
The charger is plugged into line power.SolidGreen
Bluetooth is connecting or disconnecting from the
charger.
Flashing slowlyBlue
The charger is connected to the phone using
Bluetooth.
Solid
No spare battery is installed.SolidUnlitBattery
The spare battery is charging.SolidRed
The spare battery is fully charged.SolidGreen
The station is powered by the spare battery with
adequate charge.
SolidAmber-yellow
The station is powered by the spare battery, but the
battery is low.
Flashing
The station is powered by the spare battery, but the
battery is rapidly depleting.
Flashing and
dimming slowly
The spare battery charges only when the Cisco Unified Wireless IP Phone 7925G Desktop Charger is plugged
into line power.
The Cisco Unified Wireless IP Phone 7925G Desktop Charger supports Bluetooth Version 2.1 + Extended
Data Rate (EDR) using Hands-free Version 1.5.
The following figure shows the location of the Control button. The Control button is used when pairing the
charger with the phone.
Cisco Unified Wireless IP Phone 7925G, 7925G-EX, and 7926G Administration Guide
9
Cisco Unified Wireless IP Phone
Cisco Unified Wireless IP Phone 7925G Desktop Charger Overview

Bluetooth Technology
The Cisco Unified Wireless IP Phones are full-feature telephones and a qualified Bluetooth wireless devices
(Qualified Device ID [QDID] B014396) and provide voice communication over the same wireless LAN that
your computer uses. In addition to basic call-handling features, your phone operates with Bluetooth wireless
headsets, including certain hands-free call features.
Bluetooth devices operate in the unlicensed Industrial Scientific Medicine (ISM) band of 2.4 GHz, which is
the same as the 802.11b/g band. This unlicensed band in most countries includes the frequency range from
2400 to 2483.5 MHz. Bluetooth enables low bandwidth wireless connections within a range of 10 meters.
The best performance is in the 1 to 2 meter range. Synchronous voice channels are provided by using circuit
switching and asynchronous data channels are provided by using packet switching.
Bluetooth uses integrated Adaptive Frequency Hopping (AFH) to avoid interference. Every 625 microseconds
(1/1,000,000 of a second) the channel changes or hops to another frequency within the 2402 to 2480 MHz
range. This equals 1600 hops every second.
The Cisco Unified Wireless IP Phones contain a Bluetooth module and 802.11 WLAN module. This coexistence
greatly reduces and avoids radio interference between the Bluetooth and 802.11b/g radio.
Bluetooth devices fit into to three different power classes, as shown in the following table.
Table 1: Bluetooth Maximum Permitted Transmit Power and Range by Class
RangeMaximum permitted transmit power (mW, dBm)Class
Up to 100 meters100 mW, 20 dBmClass 1
Cisco Unified Wireless IP Phone 7925G, 7925G-EX, and 7926G Administration Guide
10
Cisco Unified Wireless IP Phone
Bluetooth Technology

RangeMaximum permitted transmit power (mW, dBm)Class
Up to 10 meters2.5 mW, 4 dBmClass 2
Up to 1 meter1 mW, 0 dBmClass 3
Bluetooth Class 2.0 with Extended Data Rate (EDR) is a short-range wireless technology that is supported
by the Cisco Unified Wireless IP Phones. The phones support the Hands-Free Profile Version 1.5.
Because of potential interference issues, Cisco recommends that you:
•Use 802.11a that operates in the 5 GHz band.
•Reduce the proximity of other 802.11b/g devices, Bluetooth devices, microwave ovens, and large metal
objects.
•Use the Cisco Unified Wireless IP Phone on the same side of the body as the Bluetooth-enabled headset.
Use CSA or ATEX qualified Bluetooth accessories with the Cisco Unified IP Phone 7925G-EX in hazardous
environments.
Caution
For information about pairing headsets, see Headset Usage.
For more information about WLAN configuration and Bluetooth, see Site Survey Verification.Cisco Unified
Wireless IP Phone 7925G, 7925G-EX, and 7926G User Guide contains user-specific information.
For more information about Bluetooth and hands-free profiles, see http://www.bluetooth.com.
Hands-Free Profile
Your phone supports certain features of the Hands-free Profile, which is a standard set of features that enable
users of handsfree devices (such as Bluetooth wireless headsets) to perform certain tasks without having to
handle the phone. For example, instead of pressing Redial on your phone, you can redial a number from your
Bluetooth wireless headset according to instructions from the headset manufacturer.
Use CSA or ATEX qualified bluetooth accessories with the Cisco Unified IP Phone 7925G-EX in hazardous
environments.
Caution
These hands-free features apply to Bluetooth wireless headsets used with your Cisco Unified Wireless IP
Phone:
Redial
Re-calls the last number dialed.
Reject incoming call
Uses the iDivert option to direct the call to voicemail.
Cisco Unified Wireless IP Phone 7925G, 7925G-EX, and 7926G Administration Guide
11
Cisco Unified Wireless IP Phone
Hands-Free Profile

Three-way calling
When there is an active call and another incoming call or call on hold, you may choose to handle the
calls in one of these ways:
•End the active call and answer or resume a waiting call.
•Put the active call on hold and answer or resume a waiting call.
Hands-free devices may differ in how features are activated. Hands-free device manufacturers may also
use different terms when referring to the same feature.
For more information on using hands-free features, see the documentation provided by the device
manufacturer.
Note
Feature Support
The Cisco Unified Wireless IP Phone functions much like traditional IP phones allowing you to place and
receive telephone calls while connected to the wireless LAN. In addition to traditional phone features, the
Cisco Unified Wireless IP Phone includes features that enable you to administer and monitor the phone as a
network device.
This product is not a medical device and may use an unlicensed frequency band that is susceptible to
interference from other devices or equipment.
Caution
Feature Overview
The Cisco Unified Wireless IP Phone provides traditional telephony functionality, such as call forward and
call transfer, call pickup, redial, speed dial, conference calls, and voice message system access, as well as
these features:
•Bluetooth Class 2 technology for headsets that support Bluetooth
•Six-line appearance
•Adjustable ring and volume levels
•Adjustable display brightness and time outs
•Autodetection of headset and autoanswer from the headset
•Wireless web access to your phone number and the corporate directory
•Access to network data, XML applications, and web-based services
•Online customizing of phone features and services from the User Options web pages
•An online help system that displays information on the phone screen
Cisco Unified Wireless IP Phone 7925G, 7925G-EX, and 7926G Administration Guide
12
Cisco Unified Wireless IP Phone
Feature Support

Related Topics
Network Profiles
Features, Templates, Services, and Users
Telephony Features
You can use Cisco Unified Communications Manager Administration to set up phone registration criteria and
calling search spaces, to configure corporate directories and services, and to modify phone button templates.
See Telephony Features Available and Cisco Unified Communications Manager Administration Guide for
additional information.
For more information about the Cisco Unified Communications Manager Administration, see Cisco
Unified Communications Manager documentation suite at http://www.cisco.com/en/US/products/sw/voicesw/
ps556/tsd_products_support_series_home.html.
You can also use the context-sensitive help available within the application for guidance.
Network Settings
As with other network devices, you must configure wireless IP phones to access Cisco Unified Communications
Manager and the rest of the IP network using the wireless LAN. There are two methods for configuring
network settings such as DHCP, TFTP, and for configuring wireless settings for the phone.
•Cisco Unified Wireless IP Phone web pages
•Network Profiles menu on the Cisco Unified Wireless IP Phone
You access the configuration web pages by using a browser from your PC. You configure network settings
on the phone itself.
Because the Cisco Unified Wireless IP Phone is a network device, you can obtain detailed status information
about it. This information can assist you in troubleshooting problems that users might encounter when using
their IP phones.
Related Topics
Cisco Unified Wireless IP Phone 7925G, 7925G-EX, and 7926G Web Pages
Cisco Unified Wireless IP Phone 7925G, 7925G-EX, and 7926G Settings
Remote Monitoring
Information for End Users
If you are a system administrator, you are the primary source of information for Cisco Unified Wireless IP
Phone users in your network or company. To ensure that you distribute the most current feature and procedural
information, familiarize yourself with Cisco Unified Wireless IP Phone documentation. Make sure you visit
the Cisco Unified IP Phone web site:
http://www.cisco.com/en/US/products/hw/phones/ps379/tsd_products_support_maintain_and_operate.html
From this site, you can view additional phone documentation.
Cisco Unified Wireless IP Phone 7925G, 7925G-EX, and 7926G Administration Guide
13
Cisco Unified Wireless IP Phone
Telephony Features

In addition to providing documentation, it is important to inform users about available Cisco Unified Wireless
IP Phone features (including features specific to your company or network) and about how to access and
customize those features, if appropriate.
Related Topics
Internal Support Website
Security Features
Implementing security in a wireless network protects against data tampering to Cisco Unified Communications
Manager data, call signaling, and media stream. It also reduces the chances for identity theft. To reduce the
threats, the Cisco wireless LAN (WLAN) provides options for user authentication with servers and for
encrypting communications streams between phones and network devices.
For information about supported security options for the Cisco Unified Wireless IP Phone, see Authentication
Methods.
For information about security features supported by Cisco Unified Communications Manager and Cisco
Unified Wireless IP Phones, see Supported Security Features, on page 15.
The following table provides additional information about security topics.
Table 2: Security Topics
ReferenceTopic
See Cisco Unified Communications Manager Security Guide
Detailed explanation of security, including
setup, configuration, and troubleshooting
information for Cisco
Unified Communications Manager and
Cisco Unified IP Phones
See Supported Security Features, on page 15Security features supported on the Cisco
Unified IP Phone
See Security Restrictions, on page 19Restrictions regarding security features
See Security Profiles, on page 17Viewing a security profile name when
running Cisco Unified Communications
Manager 5.0 or later
See Authenticated, Encrypted, and Protected Phone Calls, on
page 18
Identifying phone calls for which security
is implemented
See Network Protocols
See Phone Configuration Files and Profile Files
Transport Layer Security (TLS) connection
See Phone Startup ProcessSecurity and the phone startup process
See Phone Configuration Files and Profile FilesSecurity and phone configuration files
Cisco Unified Wireless IP Phone 7925G, 7925G-EX, and 7926G Administration Guide
14
Cisco Unified Wireless IP Phone
Security Features

ReferenceTopic
See Network ProfilesChanging the TFTP Server 1 or TFTP
Server 2 option on the phone when security
is implemented
See Display Security Configuration ScreenItems on the Security Configuration menu
on the phone
See CTL File ScreenUnlocking the CTL file
See Product-Specific Fields for Cisco Unified Wireless IP Phone
7925G, 7925G-EX, and 7926G
Disabling access to phone web pages
See Common Phone Status Messages
See Cisco Unified Communications Manager Security Guide,
Troubleshooting chapter
Troubleshooting
See Reset Phone to Factory DefaultsResetting or restoring the phone
Supported Security Features
The following table provides an overview of the security features that the Cisco Unified Wireless IP Phone
supports. For more information about these features and about Cisco Unified Communications Manager and
Cisco Unified IP Phone security, see Cisco Unified Communications Manager Security Guide.
For information about current security settings on a phone, choose SETTINGS >System Configuration >
Security. For more information, see Display Security Configuration Screen.
Most security features are available only if a certificate trust list (CTL) is installed on the phone. For more
information about the CTL, see “Configuring the Cisco CTL Client”chapter in the Cisco Unified
Communications Manager Security Guide.
Note
Table 3: Security Features Description
DescriptionFeature
Prevents tampering with the firmware image before it is loaded on a phone
by using signed binary files (with the extension.sbn). Tampering with the
image causes a phone to fail the authentication process and reject the new
image.
Image authentication
Cisco Unified Wireless IP Phone 7925G, 7925G-EX, and 7926G Administration Guide
15
Cisco Unified Wireless IP Phone
Supported Security Features

DescriptionFeature
Authenticates each Cisco Unified IP Phone by using a unique certificate.
Phones include a manufacturing installed certificate (MIC), but for
additional security, you can specify in Cisco Unified Communications
Manager Administration that a certificate be installed by using the
Certificate Authority Proxy Function (CAPF). Alternatively, you can install
a locally significant certificate (LSC) from the Security Configuration
menu on the phone. See Set Up Phone Security Certificate for more
information.
Customer-site certificate
installation
Occurs between the Cisco Unified Communications Manager server and
the phone when each entity accepts the certificate of the other entity.
Determines whether a secure connection between the phone and a
Cisco Unified Communications Manager should occur, and, if necessary,
creates a secure signaling path between the entities using TLS protocol.
Cisco Unified Communications Manager will not register phones unless
authenticated by the Cisco Unified Communications Manager.
Device authentication
Validates digitally signed files that the phone downloads. The phone
validates the signature to make sure that file tampering did not occur after
the file creation. Files that fail authentication are not written to Flash
memory on the phone. The phone rejects such files without further
processing.
File authentication
Uses the TLS protocol to validate that no tampering has occurred to
signaling packets during transmission.
Signaling Authentication
Each Cisco Unified IP Phone contains a unique manufacturing installed
certificate (MIC), which is used for device authentication. The MIC is a
permanent unique proof of identity for the phone, and allows Cisco Unified
Communications Manager to authenticate the phone.
Manufacturing installed
certificate
After you configure a Cisco Unified Survivable Remote Site Telephony
(SRST) reference for security and then reset the dependent devices in
Cisco Unified Communications Manager Administration, the TFTP server
adds the SRST certificate to the phone cnf.xml file and sends the file to
the phone. A secure phone then uses a TLS connection to interact with the
SRST-enabled router.
Secure Cisco Unified SRST
reference
Uses SRTP to ensure that the media streams between supported devices
proves secure and that only the intended device receives and reads the
data. Includes creating a media master key pair for the devices, delivering
the keys to the devices, and securing the delivery of the keys while the
keys are in transport.
Media encryption
Ensures that all SCCP signaling messages that are sent between the device
and the Cisco Unified Communications Manager server are encrypted.
Signaling encryption by using
TLS
Cisco Unified Wireless IP Phone 7925G, 7925G-EX, and 7926G Administration Guide
16
Cisco Unified Wireless IP Phone
Supported Security Features

DescriptionFeature
Implements parts of the certificate generation procedure that are too
processing-intensive for the phone, and it interacts with the phone for key
generation and certificate installation. The CAPF can be configured to
request certificates from customer-specified certificate authorities on behalf
of the phone, or it can be configured to generate certificates locally.
CAPF (Certificate Authority
Proxy Function)
Defines whether the phone is nonsecure, authenticated, or encrypted. See
Security Profiles, on page 17 for more information.
Security profiles
Lets you ensure the privacy of phone configuration files.Encrypted configuration files
You can prevent access to a phone web page, which displays a variety of
operational statistics for the phone.
Optional disabling of the web
server functionality for a phone
Additional security options, which you control from
Cisco Unified Communications Manager Administration:
•Disabling Gratuitous ARP (GARP)
•Disabling access to the Setting menus
•Disabling access to web pages for a phone
You can view current settings for the GARP Enabled and Web
Access options by looking at the phone’s Device Information
menu. For more information, see Display Security Configuration
Screen.
Note
Phone hardening
Related Topics
Security Profiles, on page 17
Authenticated, Encrypted, and Protected Phone Calls, on page 18
Device Information
Security Restrictions, on page 19
Security Profiles
A security profile defines whether the phone is nonsecure, authenticated, encrypted, or protected. Every Cisco
Unified IP Phone that is supported by Cisco Unified Communications Manager Administration has a security
profile. For information about configuring the security profile and applying the profile to the phone, see Cisco
Unified Communications Manager Security Guide.
For Cisco Unified Wireless IP Phones using Cisco Unified CallManager 4.3 and later, security is configured
on each phone. For more information about configuring security, see Cisco Unified CallManager Security
Guide at http://www.cisco.com/en/US/products/sw/voicesw/ps556/prod_maintenance_guides_list.html.
Note
Cisco Unified Wireless IP Phone 7925G, 7925G-EX, and 7926G Administration Guide
17
Cisco Unified Wireless IP Phone
Security Profiles

To view the security mode that is set for the phone, from the phone screen, choose SETTINGS >Device
Information >Security >Security Mode.
Related Topics
Display Security Configuration Screen
Authenticated, Encrypted, and Protected Phone Calls, on page 18
Device Information
Security Restrictions, on page 19
Authenticated, Encrypted, and Protected Phone Calls
When security is implemented for a phone, you can identify authenticated or encrypted phone calls by icons
on the screen on the phone. You can also determine that the connected phone is secure and protected if a
security tone plays at the beginning of the call.
In an authenticated call, all devices participating in the establishment of the call authenticate using Cisco Unified
Communications Manager. When an in-progress call is authenticated, the call progress icon to the right of
the call duration timer in the phone screen changes to this icon: .
In an encrypted call, all devices participating in the establishment of the call are authenticated by Cisco Unified
Communications Manager. In addition, call signaling and media streams are encrypted. An encrypted call
offers a high level of security, providing integrity and privacy to the call. When an in-progress call is being
encrypted, the call progress icon to the right of the call duration timer in the phone screen changes to this icon:
.
If the call is routed through non-IP call legs (for example, the PSTN) the call may be nonsecure even
though it is encrypted within the IP network and has a lock icon associated with it.
Note
In a protected call, a security tone plays at the beginning of a call to indicate that the other connected phone
is also receiving and transmitting encrypted audio. If your call is connected to a nonprotected phone, the
security tone does not play.
Protected calling is supported for connections between two phones only. Some features, such as conference
calls, shared lines, Extension Mobility, and Join Across Lines, are not available when protected calling
is configured. Protected calls are not authenticated.
Note
Protected Calls Identification
A protected call is established when your phone and the phone on the other end are configured for protected
calling. The other phone can be in the same Cisco IP network or on a network outside the IP network. Protected
calls can only be made between two phones. Conference calls and other multiple-line calls are not supported.
The system establishes a protected call using this process:
1A user initiates the call from a protected phone (protected security mode).
Cisco Unified Wireless IP Phone 7925G, 7925G-EX, and 7926G Administration Guide
18
Cisco Unified Wireless IP Phone
Authenticated, Encrypted, and Protected Phone Calls

2The phone displays the icon (encrypted) on the phone screen. This icon indicates that the phone is
configured for secure (encrypted) calls, but the icon does not mean that the other connected phone is also
protected.
3A security tone plays if the call is connected to another protected phone, indicating that both ends of the
conversation are encrypted and protected. If the call is connected to a nonprotected phone, the secure tone
does not play.
Protected calling is supported for conversations between two phones. Some features, such as conference
calls, shared lines, Extension Mobility, and Join Across Lines, are not available when protected calling
is configured.
Note
Related Topics
Security Features, on page 14
Security Profiles, on page 17
Security Restrictions, on page 19
Security Restrictions
When using a phone that is not configured for encryption, the user cannot barge into an encrypted call. When
barge fails in this case, a reorder (fast busy) tone plays on the barge initiator phone.
If the phone is configured for encryption, the user can barge into an authenticated or nonsecure call from the
encrypted phone. After the barge occurs, Cisco Unified Communications Manager classifies the call as
nonsecure.
If the phone is configured for encryption, the user can barge into an encrypted call, and the phone indicates
that the call is encrypted.
A user can barge into an authenticated call, even if the phone that is used to barge is nonsecure. The
authentication icon continues to display on the authenticated phones in the call, even if the initiator’s phone
does not support security.
Cisco Unified Wireless IP Phone 7925G, 7925G-EX, and 7926G
Deployment
When deploying a new IP telephony system, system administrators and network administrators must complete
several tasks to prepare the network for IP telephony service. For information and a checklist for setting up
and configuring a complete Cisco IP telephony network, see the “System Configuration Overview”chapter
in the Cisco Unified Communications Manager System Guide.
After you have set up the IP telephony system and configured system-wide features in Cisco Unified
Communications Manager Administration, you can add IP phones to the system. To add Cisco Wireless IP
Phones to the IP network, system administrators should conduct a site survey to determine strategic locations
for access points (APs) to ensure good wireless voice coverage. For detailed information about a voice over
WLAN deployment, see the Cisco Unified Wireless IP phone 7925 and 7926 Series Deployment Guide at
Cisco Unified Wireless IP Phone 7925G, 7925G-EX, and 7926G Administration Guide
19
Cisco Unified Wireless IP Phone
Security Restrictions

this URL: http://www.cisco.com/en/US/products/hw/phones/ps379/products_implementation_design_guides_
list.html.
The Cisco Unified Wireless IP Phone 7926G must be running Firmware Version 1.4(1) or later.Note
Cisco Unified Wireless IP Phone 7925G, 7925G-EX, and 7926G Setup in Cisco
Unified Communications Manager
To add phones to the Cisco Unified Communications Manager Administration, you can use:
•Autoregistration
•Cisco Unified Communications Manager Administration
•Bulk Administration Tool (BAT)
•BAT and the Tool for Auto-Registered Phones Support (TAPS)
For general information about configuring phones in Cisco Unified Communications Manager, see the “Cisco
Unified IP Phone”chapter in the Cisco Unified Communications Manager System Guide.
Related Topics
Cisco Unified Wireless IP Phone 7925G, 7925G-EX, and 7926G Installation, on page 20
Cisco Unified Communications Manager Phone Addition Methods
Features, Templates, Services, and Users
Cisco Unified Communications Manager Setup for Cisco Unified Wireless IP Phone 7925G, 7925G-EX,
and 7926G
Cisco Unified Wireless IP Phone 7925G, 7925G-EX, and 7926G Installation
After you have added the phones to the Cisco Unified Communications Manager Administration, you can
complete the phone installation. You can install the phone or the user can install the phone. The Cisco Unified
Wireless IP Phone 7925G, 7925G-EX, and 7926G Installation Guide provides directions for assembling the
phone and accessories and charging the battery.
Before using the phone to connect to the wireless LAN, you need to configure a network profile for the phone.
You can use the phone web pages to set up the network profile and other phone settings, or you can configure
the network profile using the menus on the phone.
If you use autoregistration that is part of Cisco Unified Communications Manager Administration, you need
to update the specific configuration information for the phone such as associating the phone with a user,
changing the softkey template, or changing the directory number (DN).
Before you install a phone, even if it is new, upgrade the phone to the current firmware image. For
information about upgrading, see the readme file for your phone which is located at: http://www.cisco.com/
cgi-bin/tablebuild.pl/ip-7900ser-crypto.
Note
Cisco Unified Wireless IP Phone 7925G, 7925G-EX, and 7926G Administration Guide
20
Cisco Unified Wireless IP Phone
Cisco Unified Wireless IP Phone 7925G, 7925G-EX, and 7926G Setup in Cisco Unified Communications Manager