Identity Certificates - Avaya J100 Series Installing And Administering

Phones support three types of certificates:
• Trusted certificates
• Online Certificate Status Protocol (OCSP) trust certificates
• Phone identity certificates
The Trusted and OCSP trust certificates are root or intermediate Certification Authority (CA)
certificates that are installed on the phone through the 46xxsettings.txt file.
Enhancements for installing identity certificates:
• SCEP over HTTPS is supported for enrollment.
• PKCS#12 file format is supported for installation.
To check the number of days remaining for Identity certificate expiry, use the parameter
CERT_WARNING_DAYS . The user is notified through a log message if the log level is
maintained as WARNING with the category CERTMGMT. The logs are maintained and displayed
if SYSLOG is enabled.
MIB object tables and IDs are created for certificates installed on the phone. You can view the
certificate attributes through an SNMP MIB browser.
To implement DES, the phone has 64 Public CA certificates built in. For a list of the certificates,
see Appendix B.
Related links
Appendix B: Public CA Certificates

Identity certificates

Identity certificates are the endpoint or Server certificates. To share the identity, a public key is
presented for identification. X509v3 compliant certificates are supported. Secure communications
that use Transport Layer Security (TLS) or certificates for authentication are supported to
participate in a Public Key Infrastructure (PKI). The following mechanisms are supported for
installation:
• Enrolling a certificate : Creates a private key and Certificate Signing Request (CSR). CSR is
sent to the Certificate Authority (CA) using a manual or automatic Simple Certificate
Enrollment Protocol (SCEP) interface. The certificate is validated and accepted when CA
signs the CSR.
• Importing Key and Certificate: Uses an encrypted PKCS #12 file format to import both the
private key and the corresponding certificate.
You can view the following attributes of the certificate using an SNMP MIB browser:
• Serial Number
• Subject Name
• Issuer Name
• Validity Period:notBefore and notAfter dates
• Thumbprint: Hash of the certificate
August 2018 Installing and Administering Avaya J100 series IP Phones in third-party call control
on page 177
setup
Comments on this document? infodev@avaya.com
Certificate management
89