In the previous blog post, we covered the details of deploying 802.1x EAP-TLS on Polycom VVX phones using Cisco 2960X switch and Windows NPS RADIUS server. Deploying device certificates manually on the phones can be a time consuming process especially for high security environments when a unique device certificate is required for each phone. With the release of UCS5.9.3 firmware in June this year, Polycom VVX phones now support Simple Certificate Enrollment Protocol SCEP for easy requesting and assigning devices certificates for 802.1x EAP-TLS authentication. This blog post builds upon the same lab environment of the previous post but describes in detail how to add and deploy SCEP. |