Avaya 1230 - Page 275

Figure 43: Example of [DEV_CERT] section
• The "*" pointed by the FILENAME attribute is substituted with the IP Deskphone MAC
address before the IP Deskphone requests the PKCS#12 file. If the IP Deskphone has
multiple PKCS#12 files, the administrator must add another ID beside "*". This ID can be
the profile index.
• The VERSION attribute determines if the file should be downloaded by comparing this
VERSION with the VERSION stored in the corresponding device certificate profile.
• The PROFILE attribute points to the device certificate profile index. The certificate profile
index identifies the file name where the profile is stored in the IP Deskphone memory
(SFS), and identifies the device certificate profile.
• The PURPOSE attribute identifies device certificate usage. The purpose attribute is a bit
mask that lets a device certificate be used for multiple purposes; for example, sharing of
device certificates. These purposes can be:
- EAP-TLS
- SIP-TLS
- HTTPS (optional)
2. After 12xxSIP.cfg is downloaded to the IP Deskphone from the provisioning server, the
IP Deskphone executes the [DEV_CERT] section and downloads the PKCS#12 file.
3. After the PKCS#12 file is downloaded, the IP Deskphone prompts the administrator to enter
the PKCS#12 protected password as shown in the following figure.
Figure 44: PKCS12 password prompt
Important:
The password can be empty, but the use of an empty password is not recommended
except under very controlled conditions.
Device Certificate Installation
March 2015 SIP Software for Avaya 1200 Series IP Deskphones-Administration 275
Comments? infodev@avaya.com