Securing Cisco Unified CallManager Administration

This chapter covers the following topics:

• Explaining the threats targeting remote Cisco CallManager Administration and other applications
• Explaining how HTTPS provides secure remote communication and logins to Cisco CallManager Administration
• Describing HTTPS certificate details, using Microsoft IIS to save a certificate to a trusted folder, and copying the certificate to a file
• Describing how MLA provides multiple levels of security to Cisco CallManager Administration
• Enabling MLA and assigning a password to the superuser
• Defining a functional group and identifying the two types of functional groups
• Defining a user group and identifying how its privileges are mapped to functional groups
• Creating a new functional group and a new user group and assigning an access privilege level to the members of the user group

By securing communication with the Cisco CallManager using Secure HTTP (HTTPS), a hacker cannot listen to the data stream during HTTP sessions. In addition, in large voice environments, it is important to distribute the various administration tasks. Cisco CallManager Multilevel Administration Access allows you to assign different authorization levels to administrators. This chapter discusses both the concepts and configuration of HTTPS and MLA on your Cisco CallManager servers.