Avaya 1230 - Certificates Overview

The supplicant can be authenticated to an authentication server using one of these EAP
methods:
- EAP-MD5
- EAP-PEAP
- EAP-TLS
• Device certificate management
The administrator can install a device certificate on the IP Deskphone by using SCEP or
PKCS#12 import file. The IP Deskphone can verify the imported device certificate by checking
the availability of the IP Deskphone against the Certificate Trust List (CTL) stored in the
IP Deskphone. CTL is a predefined list of trusted certificates including CAs, intermediate CAs,
and server certificates which the IP Deskphone views as trust anchors. The administrator can
also view and delete a certificate on the IP Deskphone.
• Provisioning configuration file
The provisioning configuration file, such as 12xxSIP.cfg and all other configuration files referred
by 12xxSIP.cfg, specifies software and resource files that are downloaded to the IP Deskphone
from a provisioning server by using the secure provision method HTTPS.
• Security and error logs
The administrator can view security and error logs that occurred during the operation of the
IP Deskphone. This feature is accessed through the Diagnostics screen.
• Security policy file updates
The security policy file defines a set of rules to determine the required actions taken by the
IP Deskphone.
Certificates overview
Certificates bind an identity to a pair of electronic keys that are used to encrypt and sign digital
information, and make it possible to verify someone's claim that they have the right to use a given
key. Certificates provide a complete security solution, assuring the identity of all parties involved in a
transaction. Certificates are issued by a Certification Authority (CA) and are signed with the CA's
private key.
A certificate contains the following information:
• Owner's public key
• Owner's name
• Expiration date of the public key
• Name of the issuer (the CA that issued the certificate)
• Serial number of the certificate
• Digital signature of the issuer
Certificate-based authentication
244 SIP Software for Avaya 1200 Series IP Deskphones-Administration March 2015
Comments? infodev@avaya.com