Administrator’s Guide for Polycom HDX Systems
8–28 Polycom, Inc.
To use OCSP:
1 Go to Admin Settings > Security > Revocation.
2 Configure these settings on the Revocation page.
If the Always Validate Peer Certificates from Browsers setting is enabled and
the expired CRL is for a CA that is part of the trust chain for the client certificate
sent by your browser, you will no longer be able to connect to the HDX web
interface because the revocation check will always fail. In this case, unless the HDX
web interface can be accessed by a user whose client certificate's trust chain does
not include the CA whose CRL is expired, you must delete all certificates and CRLS
from the system and then reinstall them. See the Deleting Certificates and CRLs on
page 8-31 for more information.
Setting Description
Revocation Method Select the OSCP method.
Allow Incomplete
Revocation Checks
When this field is enabled, the HDX system treats
the following response from the OCSP responder
as a successful revocation check that would
otherwise be considered a failed check:
• If the OCSP responder responds that the
status is unknown or if no response is received,
the system treats this as a successful
revocation check.
Regardless of the state of this setting, the following
statements apply:
• If the OCSP responder indicates a known
revoked status, the HDX system treats this as
a revocation check failure and does not allow
the connection.
• If the OCSP responder indicates a known good
status, the HDX system treats this as a
successful revocation check and allows the
connection.
Artisan Technology Group - Quality Instrumentation ... Guaranteed | (888) 88-SOURCE | www.artisantg.com
To Next Page
Loading...
Need help?
General
