The Secure Tone
feature can configure a phone to play a secure indication tone when a call is
encrypted. The tone indicates that the call is protected and that confidential
information may be exchanged. The 2-second tone comprises three long beeps. If
the call is protected, the tone begins to play on a protected phone as soon as
the called party answers.
When the call is not
protected, the system plays a nonsecure indication tone, which comprises six
short beeps, on a protected phone.
Only callers on
protected phones can hear secure and nonsecure indication tones. Callers on
phones that are not protected cannot hear these tones.
The secure and
nonsecure indication tones are supported on the following types of calls:
Intracluster to IP-to-IP
IP-to-Time-Division-Multiplexing (TDM) calls through a protected
MGCP E1 PRI gateway
For video calls, the
system plays secure and nonsecure indication tones on protected devices.
For video calls,
the user may first hear secure indication tone for the audio portion of the
call and then nonsecure indication tone for overall nonsecure media.
A lock icon that is
displayed on a Cisco Unified IP Phone indicates that the media are encrypted,
but does not indicate that the phone has been configured as a protected device.
However, the lock icon must be present for a protected call to occur.
You can configure
only supported Cisco Unified IP Phones and MGCP E1 PRI gateways as protected
devices in Cisco Unified Communications Manager.
Communications Manager can also direct an MGCP Cisco IOS gateway to play secure
and nonsecure indication tones when the system determines the protected status
of a call.
provide these functions:
You can configure phones
that are running SCCP or SIP as protected devices.
Protected devices can call
nonprotected devices that are either encrypted or nonencrypted. In such cases,
the call specifies nonprotected and the system plays nonsecure indication tone
to the phones on the call.
When a protected phone
calls another protected phone, but the media is not encrypted, the system plays
a nonsecure indication tone to the phones on the call.
You must configure the MGCP
gateway for SRTP encryption. Configure the gateway with this command:
The MGCP gateway must
specify an Advanced IP Services or Advanced Enterprise Services image (for
Unified CM Administration, choose
Device > Phone.
and List Phones window is displayed.
phone for which you want to set secure tone parameters.
Configuration window is displayed.
Softkey Template drop-down list in the Device
Information portion of the window, choose
Standard Protected Phone.
use a new softkey template without supplementary service softkeys for a
Across Lines option to Off.
Protected Device check box.
Security Profile drop-down list (in the Protocol Specific
Information portion of the window), choose a secure phone profile that is
already configured in the
Security Profile Configuration window (System > Security
Profile > Phone Security Profile.