AudioCodes 400HD Series - Managing Security Certificates; Loading the Root CA Certificate to the Phone; Table 3-43: Root CA Certificate Parameters

Administrator's Manual 3. Manual Configuration of a Single IP Phone
Version 3.4.4 99 400HD IP Phones Series - Teams Compatible
3.5.3 Managing Security Certificates
AudioCodes IP phones are loaded with factory-set preinstalled certificate files: private key
file, certificate file and a Trusted Root CA file that is signed by AudioCodes.
Whenever the IP phone authenticates with a remote server, it can be authenticated using
these certificate files. Each IP phone receives a uniquely generated private key certificate
file based on its MAC address. If the remote server is configured to authenticate the client
and AudioCodes factory-set certificates are used for authentication, then the AudioCodes
Certificate and AudioCodes Trusted Root CA must be downloaded to the remote server.
These files can be downloaded from the AudioCodes Web site. For more information, contact
your local AudioCodes sales representative. If you use the AudioCodes Redirect server to
obtain firmware and configuration files, then the factory-set certificates are used to
authenticate the connection with this server. If default certificate files are missing or deleted,
the phone will regenerate these files automatically the next time it is powered up.
3.5.3.1 Loading the Root CA Certificate to the Phone
The section shows how to load the root CA certificate to the phone. The certificate enables
signing in with 802.1x Authentication. With Microsoft Skype for Business, more than one
certificate file is loaded automatically using DHCP Option 43.
 To load the root CA certificate to the phone:
 Use the table below as reference.
Table 3-43: Root CA Certificate Parameters
Parameter Description
security/ca_certificate/0/uri= The first root CA certificate loaded to the phone.
security/ca_certificate/1/uri= The second root CA certificate loaded to the phone.
security/ca_certificate/2/uri= The third root CA certificate loaded to the phone.
security/ca_certificate/3/uri= The fourth root CA certificate loaded to the phone.
security/ca_certificate/4/uri= The fifth root CA certificate loaded to the phone.