Which entity signs a Cisco IP phone LSC? 

Answer options:

A. Godaddy.com Enrollment Server
B. Manufacturer Certificate Authority
C. Registration Authority
D. Certificate Authority Proxy Function
E. Cisco Certificate Authority

D

By default, LSC certificates are not installed on Cisco IP phones. Cisco IP phones that are required to use LSC certificates must be provisioned to allow TLS transactions before deployment in the field. LSC certificates can be provisioned to the Cisco IP phones through the Certificate Authority Proxy Function (CAPF) process. This process is completed using TLS and USB tokens coupled with the CTL client. Moreover, the Cisco ASA Phone Proxy feature can serve LSC certificates to the Cisco IP phones. Cisco IP phones will only work with the Cisco ASA Phone Proxy and will not establish secure connectivity with the Cisco Unified Communications Manager.