Avaya 1230 - Chapter 34: Embedded Device Certificate Support

Chapter 34: Embedded device certificate
support
TLS connection with Avaya Aura
®
Session Manager requires mutual authentication by default.
Mutual authentication requires proper Certificate Authority (CA) and device certificates to be
installed on every IP Deskphone.
A default device certificate in the firmware allows easy connection to Avaya Aura
®
through Session
Manager using TLS . The IP Deskphones already have an embedded CA certificate which is trusted
by Avaya Aura
®
; the embedded device certificate eliminates the need for customers to generate and
install device certificates manually.
If used, embedded device certificate information is displayed in the IP Deskphone and in the output
of appropriate PDT commands.
Important:
The default embedded device certificates are trusted by the Avaya Aura
®
system. If Aura
®
is
configured so that the default certificates are replaced by customer certificates, then the
appropriate CA and device certificates must be installed on the IP Deskphones as well.
Related Links
Avaya Aura
®
support for 1200 Series IP Deskphones on page 368
Configuration on page 378
Configuration
The following parameter configures the default embedded device certificate.
USE_DEFAULT_DEV_CERT [YES/NO]
— YES – Use the default device certificate if no customer device certificate is installed.
— NO – Do not use the default device certificate (default).
This parameter controls the use of the default device certificate for HTTPS/TLS connections. The
default value is NO. It is configured in the device configuration file.
Related Links
Embedded device certificate support on page 378
378 SIP Software for Avaya 1200 Series IP Deskphones-Administration March 2015
Comments? infodev@avaya.com