Certificate Management - Avaya 9600 Series Installing And Administering

Private Key storage
The phone stores the private key in PKCS#12 and PEM file formats. The phone sends the device
identity certificate and a private key along with the encrypted password to the WPA supplicant.
EAP-MD5 password is sent to the WPA supplicant securely.
Temporary Data
The phone deletes any temporary storage data from the program, variables, cache, main memory,
registers, and stack.
IP information
The phone enables the user to see the IP information on the phone screen.
The parameter PROVIDE_NETWORKINFO_SCREEN controls the display of this information.
OpenSSH/OpenSSL version
The phone displays the version of OpenSSL and OpenSSH on the VIEW screen in the
Administration menu. This information is displayed when the parameter DISPLAY_SSL_VERSION
is set to 1.
SSH Fingerprint
The phone displays SSH fingerprint to manually verify that an SSH connection is established with
the correct phone.
USB port power
This feature is controls the power of the USB port. This feature is controlled by a parameter called
USBPOWER. The available values for the parameter are:
• 0: Turns off the USB power.
• 1: Turns on the USB power only when it is powered through Aux.
• 2: Turns on the USB power.
• 3: Turns on the USB power when it is powered through Aux or PoE Class 3.
Time synchronization
The phone synchronizes the time with the configured NTP servers at intervals. The parameter
SNTP_SYNC_INTERVAL checks the time interval for synchronization any time between 60 to
2880 minutes with 1440 as the default setting
• Default: 1440 minutes
• 60–2880 minutes

Certificate management

Certificates are used to establish secure communication between network entities. Server or
mutual authentication can be used to establish a secure connection between a client and server.
The client always validates the certificate of the server and maintains a trust store to support this
validation. If the server additionally requires mutual authentication, it requests an identity
certificate from the client. The identity certificate must be provided by the client and validated by
January 2020 Installing and Administering Avaya 9601/9608/9611G/9621G/9641G/9641GS IP
Deskphones SIP
Comments on this document? infodev@avaya.com
Certificate management
45