Chapter 7: Security
Security overview
Avaya J100 Series IP Phones provide several updated security features. For example:
SIP-based Avaya J100 Series IP Phones provides several updated security features. When the
phone is in a locked state, a user can only receive calls or make emergency calls. User logs and
data are protected with the user account.
The following security features are available:
• Account management: The phone supports the following:
- Storage of passwords and user credentials using Federal Information Processing
Standards (FIPS 140–2)
- FIPS 140-2 cryptographic algorithms for application, processes, and users
- Control to toggle between FIPS and non-FIPS modes
- Identity certificate installation using Simple Certificate Enrollment Protocol (SCEP) for
enrollment and encrypted PKCS#12 file format to import both private key and certificate.
• Certificate management: The phone supports the following:
- X509v3 compliant certificates
- Public Key Infrastructure (PKI) for users who use third-party certificates for all Avaya
services including database
- Online Certificate Status Protocol (OCSP) for obtaining the revocation status of an X.509
digital certificate according to RFC 6960
• Department of Defense solution deployment with Joint Inter-operability Test Command (JITC)
compliance.
• VLAN separation mode using system parameters.
• Synchronization of the system clock at configured intervals using system parameters.
• Display of SSH fingerprint in the Administration menu.
• Display of SSH fingerprint in the Administration menu.
• Display of OpenSSH and OpenSSL version in the Administration menu.
• Display of OpenSSH and OpenSSL version in the Administration menu.
December 2018 Installing and Administering Avaya J100 Series IP Phones 136
Comments on this document? infodev@avaya.com