Ocsp Trust Certificates; Parameter Configuration For Secure Installation - Avaya J100 Series Installing And Administering

OCSP trust certificates

Online Certificate Status Protocol (OCSP) is used to check the certificate revocation status of an
x509 certificate in use. The phone trusts the OCSP server and installs its CA certificates. These
certificates are called OCSP Trust Certificates.
OCSP Trust Certificates are installed in the same way as those for System Manager. However,
OCSP Trust Certificates use a different parameter name called OCSP_TRUSTCERTS. This
parameter follows the same format as that for TRUSTCERTS.

Parameter configuration for secure installation

For a secure installation, configure the following parameters:
Parameter
TRUSTCERTS
AUTH
SSH_ALLOWED
SCEP parameters
Configure the following Simple Certificate Enrollment Protocol (SCEP) parameters:
Parameter
MYCERTURL
MYCERTCN
August 2018 Installing and Administering Avaya J100 series IP Phones in third-party call control
Set to Notes
Provides the file names of certificates to be used for authentication.
It supports both root and intermediate certificates and can contain
up to six certificate files.
1 Ensures usage of HTTPS file servers for configuration and software
files download. After AUTH is set to 1 and the device downloads the
trusted certificates, the device can only download files from an
HTTPS server. That server must have certificates that can be
validated using a trusted certificate repository.
0 Keeps SSH disabled.
Type Default Description
value
String Null Specifies the URL to access the Simple Certificate
Enrollment Protocol (SCEP) server. The device attempts
to contact the server only if this parameter is set to other
than its default value.
String $SERIA Specifies the Common name (CN) for SUBJECT in the
LNO SCEP certificate request. The values can be
$SERIALNO or $MACADDR.
If the value includes the string $SERIALNO, that string
will be replaced by the phones serial number.
If the value includes the string $MACADDR, that string
will be replaced by the phones MAC address.
Comments on this document? infodev@avaya.com
Parameter configuration for secure installation
setup
Table continues...
91