Avaya XT Series Deployment Manual page 238

Securing your XT Series
XT Series supports a standard called 802.1x EAP TLS. 802.1x is an Institute of Electrical and
Electronics Engineers (IEEE) standard that provides an authentication framework for WLANs.
802.1x uses the Extensible Authentication Protocol (EAP) to exchange messages during the
authentication process. Several authentication protocols that operate inside the 802.1x framework
are suitable for wireless networks. These protocols allow the network to authenticate the client
while also allowing the client to authenticate the network. XT Series supports EAP-TLS (EAP-
Transport Layer Security, authentication based on certificates) in addition to EAP-MD5
(authentication based on username/password).
You can load your own certificates and keys to the XT Series using a PKCS#12 file or you can
follow the manual guided procedure to obtain a .csr file and to upload the signed certificate and
Root CA to the XT Series.
1. Perform Generating a Certificate Signing Request for XT Series
request to the Certificate Authority.
2. Receive back the Root CA and signed certificate and perform
certificate that you receive from the CA
As an example, the following set of procedures secure the connection between XT Series and
other devices. Perform these tasks in the order listed below:
1. Create and upload the Avaya Meetings Management's certificate for videoconferencing
components as described in Administrator Guide for Avaya Meetings Management.
2. Perform Generating a Certificate Signing Request for XT Series
3. Perform Enabling the TLS Connection in XT Series
4. If you used a different CA for XT Series from the one used for Avaya Meetings
Management, upload the XT Series's CA root and intermediate certificates into Avaya
Meetings Management as described in Administrator Guide for Avaya Meetings
Management.
August 2020
Figure 116: Establishing TLS connection
on page 243.
Deployment Guide for Avaya XT Series
Comments on this document? infodev@avaya.com
on page 239 and send the
Uploading the CA root
on page 239.
on page 248.
238