Avaya 1230 - Scep

Figure 24: Example of the provisioning file, system.prv
SCEP
Simple Certificate Enrollment Protocol (SCEP) is a process used to obtain a certificate. This process
occurs between the IP Deskphone that requires a certificate and a trusted CA that is responsible for
providing certificates.
Figure 25: SCEP Client-Server interaction
The IP Deskphone can require several device certificates. You can request an individual device
certificate for each application, or you can request a device certificate to be shared among
applications.
The following describes the enrollment process for the IP Deskphone for which a device certificate
profile is properly configured for SCEP. The following process is executed by the IP Deskphone for
every active Device Certificate Profile (DCP) on the IP Deskphone that is configured for SCEP.
1. After the IP Deskphone starts up, the IP Deskphone automatically generates a private-public
key pair for each Device Certificate Profile configured on the IP Deskphone for SCEP.
2. The IP Deskphone uses the SCEP GetCACert command to retrieve a customer root
certificate from the CA server and prompts the administrator to validate the certificate
fingerprint before the IP Deskphone stores the root certificate permanently on the IP
Deskphone.
Certificate-based authentication
252 SIP Software for Avaya 1200 Series IP Deskphones-Administration March 2015
Comments? infodev@avaya.com