3. Perform Uploading XT Server Certificates on page 91.
4. Perform Enabling the TLS Connection in XT Server on page 95 .
5. To encrypt the media (audio, video, presentation) of videoconferences using the SRTP protocol,
perform Enabling Encryption for Videoconferences on page 97.
Generating a Certificate Signing Request for XT Server
About this task
This section details how to generate a certificate signing request (CSR) for the XT Server, which must be
signed by a certificate authority (CA). This is done from the web interface only.
Once properly signed, the certificate would confirm the identity of the XT Server to other components in
the network, and can also facilitate encrypted communications with those components.
Important:
If you modify the XT Server's IP address, you must generate a new CSR.
To restore previously uploaded certificates, see
Backing Up and Restoring XT Server Certificates on
page 93. To delete the certificates, see Deleting XT Server Certificates on page 94.
Important:
Using encryption is subject to local regulation. In some countries it is restricted or limited for usage.
For more information, consult your local reseller.
Before you begin
To secure SIP connections using TLS certificates, your system must have a static IP address, since the
system generates the certificate request using its IP address as the Common Name (CN). For more
information, see
Configuring IP Addresses on page 77.
Procedure
1. Access the XT Server web interface, as described in Accessing XT Server Web Interface on
page 34.
2. Select Administrator Settings > Utilities > Certificates.
3. Enter your organization's details and your email.
Installation Guide for Scopia XT5000 Server for IP Office Version 3.2 Securing your Scopia XT Server for IP Office | 89