Fortinet Technologies Inc. Page 89 FortiVoice Enterprise Phone System 4.0.0 Administration Guide
Table 13:Certificate types
This section contains the following topics:
• Managing local certificates
• Obtaining and installing a local certificate
• Managing certificate authority certificates
• Managing the certificate revocation list
Managing local certificates
System > Certificate > Local Certificate displays both the signed server certificates and
unsigned certificate requests.
On this tab, you can also generate certificate signing requests and import signed certificates in
order to install them for local use by the FortiVoice unit.
FortiVoice units require a local server certificate that it can present when clients request secure
connections, including:
• the web-based manager (HTTPS connections only)
• phone user web interface (HTTPS connections only)
To view local certificates, go to System > Certificate > Local Certificate.
Certificate type Usage
Server certificates The FortiVoice unit must present its local server certificate for the
following secure connections:
• the web-based manager (HTTPS connections only)
• phone user web interface (HTTPS connections only)
• phone and FortiVoice unit (TLS and SRTP connenctions only), see
“Configuring SIP profiles” on page 115.
For details, see “Managing local certificates” on page 89.
CA certificates The FortiVoice unit uses CA certificates to authenticate the PKI users,
including administrators and phone users. For details, see “Managing
certificate authority certificates” on page 95.
Personal
certificates
Phone users’ personal certificates are used for S/MIME encryption.