Installation & Operation Manual 336 Document # LTRT-92224
Mediant 8000
33.10.6 Configuring an X.509 Certificate Expiration Date Reminder
Each X.509 Certificate is issued for a specific period of time i.e validity period. The
Mediant 8000 Media Gateway software automatically determines an expiration date
for each configured X.509 certificate and triggers a Security Alarm to warn the user
prior to the certificate expiration.
The Expiration date for each certificate is displayed in the Security Settings tab – both
in the Media Gateway screen (for certificates configured for the entire Media Gateway)
and in the Media Gateway Board screen (for certificates configured for the specific
Media Gateway board, in case they differ from the Media Gateway configuration).
The Certificate Expiration alarm is issued twice. A few days before the expiration, an
alarm with warning severity is issued. When you see this alarm, contact CA
immediately for a new identity certificate. When the certificate actually expires, an
alarm with error severity is issued. You may configure the amount of time between
when these two alarms are triggered.
To configure expiration date reminder for X.509 Certificate:
1. Click
to access the Media Gateway status screen.
2. In the Navigation pane, select Security and then in the configuration pane,; click
Security Settings; the Security Settings screen is displayed.
3. In the X.509 Certificates tab, Configure the Certificate Expiration Date
Reminder Days (for Certificate File) and the Trusted Root Cerificate
Expiration Date Reminder Days (for CA Certificate and Trusted Root Certificate
Files) parameters.
Note: It is highly recommended to configure expiration date reminder alarms to alert
users prior to the X.509 Certificate expiration. Set date reminder well in advance of
the expiration date to ensure that new certificates are either generated in EMS or
received from appropriate external bodies and properly configured.