Unistim Signalling Security - Avaya 1110 Fundamentals

Features
• Image files (only for 2007 and 1165E IP Deskphones)
• Fonts
To indicate that HTTPS protocol is to be used over TFTP, the prefix https:// or HTTPS:// must
be included in the provisioning server IP address.
Example:
• https://192.168.20.50
• https://intranet.companyname.com
If a root certificate is already installed on the IP Deskphone, the HTTPS server certificate must
be signed by the same root certificate.
Important:
Self-signed server certificates are not acceptable.

UNIStim signalling security

With UNIStim 3.1, Avaya 1120E IP Deskphone, Avaya 1140E IP Deskphone, and Avaya 2007
IP Deskphone can secure a connection with the Graphical External Application Server (GXAS)
using TLS. Securing the connection validates the authenticity of the GXAS, using the certificate
the server provides the IP Phone.
If the authenticity of the GXAS is not validated and the application gateway sends a dial
command to the IP Phone, a prompt is displayed requesting that the user confirm dialing. When
the connection to the GXAS is secured and the server authenticity is validated, the confirm
prompt is not required and the number is automatically dialed.
When the IP Phone connection to the GXAS is secure, a security icon appears at the top right
corner of the Avaya 1120E IP Deskphone and Avaya 1140E IP Deskphone display screen, and
at the bottom of the Avaya 2007 IP Deskphone display screen, just above the application
button. The security icon appears whether the GXAS application or the telephony screen is
displayed on the IP Phone. If the IP Phone connection to the GXAS is not secure, the security
icon does not appear.
To establish a secure connection between a GXAS that supports secure mode and Avaya
1120E IP Deskphone, Avaya 1140E IP Deskphone, and Avaya 2007 IP Deskphone, you must
provision the secure mode on the IP Phone manually or by using Info Block.
To provision secure support on the IP Phone manually, you must configure the XAS Mode
menu item to Secure Graphical in the IP Phone configuration menu. For more information
about provisioning secure support on the IP Phone manually with XAS Mode, see
Provisioning parameters for graphic-based IP Deskphones
To provision secure support on the IP Phone using Info Block, you must include s in the xa
parameter character string. For more information about provisioning secure support on the IP
Phone using Info Block, see
When secure GXAS support is configured, the GXAS must assign a certificate to the
Application Server, which is then presented to the IP Phone for authentication. For the IP Phone
to authenticate this server certificate, the Certificate Authority (CA) root certificate that issued
336 IP Deskphones Fundamentals
Table 99: Provisioning info block format
Comments? infodev@avaya.com
on page 506.
on page 466.
February 2013
Table 114: