Trusted Certificates; Ocsp Trust Certificates - Avaya 9600 Series Installing And Administering

Security configurations
the server to establish mutual authentication. Server must validate the identity certificate to
establish a secure connection.
Phones support three types of certificates:

• Trusted certificates

• Online Certificate Status Protocol (OCSP) trust certificates
• Phone identity certificates
The Trusted and OCSP trust certificates are root or intermediate Certification Authority (CA)
certificates that are installed on the phone through the 46xxsettings.txt file.
Enhancements for installing identity certificates:
• SCEP over HTTPS is supported for enrollment.
• PKCS#12 file format is supported for installation.
The user is notified through a log message if the log level is maintained as WARNING with the
category CERTMGMT. The logs are maintained and displayed if SYSLOG is enabled.
MIB object tables and IDs are created for certificates installed on the phone. You can view the
certificate attributes through an SNMP MIB browser.
Trusted certificates
Trusted certificates are root certificates of the certificate authority that issued the server or client
identity certificates in use. These certificates are installed on the phones through the HTTP server
and are used to validate server certificates during a TLS session.
System Manager includes EJBCA, an open source PKI Certificate Authority, that can be used to
issue and manage client and server certificates.

OCSP trust certificates

Online Certificate Status Protocol (OCSP) is used to check the certificate revocation status of an
x509 certificate in use. The phone trusts the OCSP server and installs its CA certificates. These
certificates are called OCSP Trust Certificates.
OCSP Trust Certificates are installed in the same way as those for System Manager. However,
OCSP Trust Certificates use a different parameter name called OCSP_TRUSTCERTS. This
parameter follows the same format as that for TRUSTCERTS.
January 2020 Installing and Administering Avaya 9601/9608/9611G/9621G/9641G/9641GS IP
Deskphones SIP
Comments on this document? infodev@avaya.com
46