Add a new SIP Trunk Security Profile to UCM

Add a new security profile in the Cisco Unified CM Administration area.

Procedure 

1. Go to System, then Security. Click SIP Trunk Security Profile.

2. Click Add New to create a TLS Security Profile (alternatively, edit an existing one to use the following settings).

   1. Type a name in the Name field.

   2. Set Device Security Mode to Encrypted.

   3. Set X.509 Subject Name to the CN from above. If more than one CN exists because of multiple certificates, enter a comma-separated list of all the CNs.

      The CN name is case-sensitive, so make sure that the CN name matches the certificate exactly.

   4. Enable Transmit Security Status.

   5. Click Save.