Caution:
Ensure that the files defined by the HTTP server configuration are accessible from all 9600
Series IP Deskphones that need those files. Ensure that the file names match the names in
the upgrade script, including case, as UNIX systems are case-sensitive.
Note:
Use any suitable HTTP application. Commonly used HTTP applications include Apache
®
and
Microsoft
®
IIS
™
.
To use HTTPS, you must download the trusted certificates to the phone, by using the
TRUSTCERTS parameter. The deskphone authenticates the server certificate. If the HTTPS
server is provided by Avaya and the HTTPS server certificate has Avaya Product root CA, the
deskphone cannot download files and perform Backup/restore to this server, without downloading
trusted certificates. Set AUTH to 1 to force downloading configuration files from the HTTPS server.
After you set AUTH to 1, the deskphone downloads configuration files from servers which have
server certificate with a corresponding root certificate in the phone trusted certificates repository.
To set up an HTTP server:
Procedure
1. Install the HTTP server application.
2. Administer the system parameter HTTPSRVR to the addresses of the HTTP server.
Include the parameter in DHCP Option 242, or the appropriate SSON Option.
3. Download the upgrade script file and application files from the
Avaya Support website to
the HTTP server.
For more information, see
Telephone Software and Application Files on page 65.
Note:
When you download the application file from the Avaya Support website, ensure you
are downloading the correct version. One version allows VPN and media encryption
functionality, while the other disables those functions.
Note:
9600 Series IP Deskphones H.323 v6.6.2 and later do not support HTTPS with
MV_IPTEL or IIS 6. It is recommended to upgrade to the current version of an HTTPS
server that supports TLS 1.2.
Result
If you choose to enhance the security of your HTTP environment by using Transport Layer
Security (TLS), you must:
• Install the TLS server application. Use of TLS for HTTPS also means download and
configuration of TRUSCERTS with the customer root CA used for signing the HTTPS server
identity certificate.
• Administer the system parameter TLSSRVR to the addresses of the Avaya HTTPS server.
Server Administration
March 2018 Administering Avaya 9608/9608G/9611G/9621G/9641G/9641GS IP Deskphones H.
323 59
Comments on this document? infodev@avaya.com