Configure monitoring and recording, in the same way you would for non-secure monitoring and recording.
Configure a built-in bridge for the agent phone.
Configure the Recording Option (Automatic Call Recording Enabled and Application Invoked Call Recording Enabled.) using the DN page on the agent phone.
Create a route pattern for the recorder.
Add a call recording profile to the DN.
Provision monitoring and recording tones as needed.
For more information and detailed procedures, see the "Monitoring and Recording" chapter in the
Cisco Unified Communications Manager Features and Services Guide.