Security Guide for Cisco Unified Communications Manager Release 15 - Authentication and Encryption Setup for CTI, JTAPI, and TAPI

Publisher

Cisco Systems

URL

https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/security/15_0/cucm_b_security-guide-release-15/cucm_b_security-guide-1251SU2_chapter_010101.html

Published

2026-09-22

Updated

unknown

Accessed

2026-09-25

HTTP status

200

License

Cisco documentation; all rights reserved; no-redistribution; short excerpts and locators only

Source notes citing this source

• Issuing CAPF certificates to CTI, JTAPI and TAPI applications requires activating the Cisco Certificate Authority Proxy Function service on the publisher (first) node. in context
• Secure CTI uses two CAPF profile types, the Application User CAPF Profile and the End User CAPF Profile. CAPF issues locally significant certificates (LSCs) through these profiles so that application users or end users can authenticate to CTIManager. in context
• A CTI port that registers to CTIManager over a TLS connection registers securely, and its media is encrypted with SRTP. in context
• The Unified CM 15 secure CTI procedure requires checking that the cluster security mode is set to mixed mode. in context
• A secure-configured JTAPI or TAPI client does not connect on any port if it cannot download the CTL file, for example because no CTL file exists. in context
• Nonsecure CTI connections between CTIManager and the application use port 2748. in context
• For TLS signaling plus SRTP media, the Unified CM 15 security guide places users in three groups: Standard CTI Enabled, Standard CTI Secure Connection, and Standard CTI Allow Reception of SRTP Key Material. in context
• Secure JTAPI and TAPI connections are configured through the CTIManager Connection Security Flag and CAPF Profile Instance ID for Secure Connection to CTIManager service parameters. in context
• For secure CTI, CTIManager and the application exchange QBE messages over TLS port 2749. in context

Cite this source record

APA

WarmTransfer. (2026, September 22). Security Guide for Cisco Unified Communications Manager Release 15 - Authentication and Encryption Setup for CTI, JTAPI, and TAPI. WarmTransfer. https://warmtransfer.net/knowledge/sources/cisco-cucm-security-15-cti-jtapi-tapi

BibTeX

@misc{warmtransfer-cisco-cucm-security-15-cti-jtapi-tapi,
  title  = {Security Guide for Cisco Unified Communications Manager Release 15 - Authentication and Encryption Setup for CTI, JTAPI, and TAPI},
  author = {{WarmTransfer}},
  year   = {2026},
  url    = {https://warmtransfer.net/knowledge/sources/cisco-cucm-security-15-cti-jtapi-tapi},
  note   = {Cisco Systems, accessed 2026-09-25}
}