Installation & Operation Manual 326 Document # LTRT-92224
Mediant 8000
Trusted Root Certificate File – certificate of the Trusted Root; used to authorize
certificates received from the remote parties, based on the identity of the CA that
issued it; if the root certificate of this CA matches one of the Trusted Root
Certificates, remote party is authorized.
The Mediant 8000 Media Gateway supports the following X.509 functionality:
Generation of Private Key and Self-Signed Certificate
Generation of Certificate Signing Request (CSR)
On-line provisioning of Private Key and Certificate files
Support for up to 3 Trusted Root Certificate files
Expiration alarm for each provisioned Certificate file
Check certificate revocation status via the OCSP protocol
33.10.1 Initial Configuration
Upon installation of the Media Gateway software, the Private Key and Self-Signed
Certificate files are automatically generated, added to the Auxiliary Files repository
and configured in the Media Gateway security settings. By default, all Media Gateway
boards use these self-generated Private Key and Certificate files.
You can view the configuration data for these files in the Security Settings tab in the
Media Gateway properties screen. You can later upgrade the self-signed certificate
with a genuine certificate signed by a CA and you can also upgrade the private key.
Note: The Private Key and X.509 Certificate files are configured at Media Gateway
level and are shared with all Media Gateway boards inside the Mediant 8000
chassis. This reduces the amount of the certification data required to provision fully
occupied Media Gatewayand simplifies the hardware replacement procedure. It
also makes the addition of the new Media Gateway board fully transparent to the
security administrator.
To Next Page
Loading...
