Transport Layer Security (TLS) functionality - available starting  rev. 4.9.5.0 

Enable SIP/TLS connection on VSLogger  

1. To enable SIP/TLS connections:

• Go to VSLogger Setup Page
• Setup->Hardware,  SIPREC,   press Edit 

Set following parameters:

• Signaling TLS Port  - set listening port for TLS SIP connection (default 5061) 
• Enable TLS connection - checked 

Submit, then Save and reload.

Or, if using CLI tool: 

cli>config

cli>(config)hw siprec

cli>(config-hw_siprec)tls y

cli>(config-hw_siprec)sipsport  5061

cli>(config-hw_siprec)save

cli>(config-hw_siprec)exit

cli>(config)reload

2. Download TLS Certificates

Press "Download X.509 Certificate" link, save .pem file.  This file needs to be uploaded to CUCM (see next section, "Configure CUCM a SIP/TLS encrypted connection for SIP Trunk" ).   

Configure CUCM a SIP/TLS encrypted connection for SIP Trunk 

Prerequisites

• Cluster Security Mode - 1  (Enterprise parameters "Security Parameters")
• Security Services ( "Cisco CTL Provider", "Cisco Certificate Authority Proxy Function") Activated. 
• Phone Security Profiles created and used by recorded phones.

1. Upload VSLogger TLS certificate ("agent.cert.pem")

Go to Cisco Unified OS Administration

• Security->Certificate Management and then press "Upload Certificate/Certificate chain" 
• Certificate Purpose "CallManager-trust"
• Choose File and select "agent.cert.pem" file downloaded from VSLogger (Download X.509 certificate link)  

2. Create SIP Trunk Security Profile

Go to Cisco Unified CM Administration, 

System->Security->Sip Trunk Security Profile  and press Add New

• Device Security Mode - "Encrypted"
• Incoming Transport Type - "TLS"
• Outgoing Transport Type - "TLS"
• x.509 Subject Name - set equal to CN of uploaded certificate. Note: case sensitive !!!      
• Transmit security status - checked

3. Configure SIP Trunk,

Device->Trunk  and press Add New.

• Create SIP trunk 
• Fill Required fields
• Check "SRTP Allowed"

• Set VSlogger ip address and TLS port 
• Select previously created Sip trunk Security Profile 

Save and Apply Config