Certificate-based authentication overview.............................................................................. 243
Certificates overview............................................................................................................ 244
Root certificate installation................................................................................................... 245
Signing a resource file......................................................................................................... 246
Device certificate installation................................................................................................ 247
Device certificate profiles..................................................................................................... 247
SCEP................................................................................................................................. 252
Device Certificate Authentication Considerations for SCEP..................................................... 253
PKCS 12 download............................................................................................................. 254
Installing a device certificate using PKCS 12......................................................................... 255
Certificate Trust Line (certificate verification).......................................................................... 256
Validating a certificate using the Certificate Trust List............................................................. 257
Certificate Administration..................................................................................................... 258
Certificates Administration main menu.................................................................................. 259
Trusted Certificates screen................................................................................................... 260
Device Certificates screen.................................................................................................... 261
CRL screen......................................................................................................................... 263
CTL screen......................................................................................................................... 264
EAP Authentication.............................................................................................................. 265
EAP Disabled...................................................................................................................... 267
EAP-MDS........................................................................................................................... 268
EAP-TLS............................................................................................................................ 268
EAP-PEAP......................................................................................................................... 268
EAP Re-authentication......................................................................................................... 268
Provisioning configuration file download................................................................................ 269
Provisioning configuration files download through HTTPS....................................................... 269
HTTPS support in BootC mode...................................................................................... 269
Single Authentication........................................................................................................... 270
Mutual Authentication.......................................................................................................... 270
Security and error logs......................................................................................................... 270
Security policy file updates................................................................................................... 272
Certificate Admin option in the user interface......................................................................... 274
Installation.......................................................................................................................... 274
Device Certificate Installation............................................................................................... 274
CTL download..................................................................................................................... 276
Upgrade and rollback tasks.................................................................................................. 276
SIP configuration file (12xxSIP.cfg)....................................................................................... 276
PKCS12 Import................................................................................................................... 276
CTL download..................................................................................................................... 277
Customer root certificate download....................................................................................... 278
Security policy file................................................................................................................ 278
Diagnostic logs.................................................................................................................... 278
Fault management behavior................................................................................................. 279
Contents
10 SIP Software for Avaya 1200 Series IP Deskphones-Administration March 2015
Comments? infodev@avaya.com