Avaya XT Series Deployment Manual page 242

Securing your XT Series
The CSR is downloaded onto your computer, with the filename: <IP address>_csr.pem
7. Save the certificate in an appropriate folder. The certificate is saved as a text file
compatible with Base-64 ASCII code, in .pem format.
8. Send the text file containing the certificate for signing as a certificate compatible with
Base-64 ASCII code, in either .pem or .cer format.
Important:
If other components communicating with the XT Series also have their own certificates,
we recommend using a common CA for all certificates for a more efficient
implementation.
9. Continue with
Generating a Certificate Signing Request for 802.1x EAP TLS
About this task
You can also configure network security authentication to be 802.1x compliant, where it sends a
username and password to your 802.1x authenticator, which verifies the login with the
authentication server. 802.1x is an Institute of Electrical and Electronics Engineers (IEEE)
standard that provides an authentication framework for WLANs. 802.1x uses the Extensible
Authentication Protocol (EAP) to exchange messages during the authentication process. Several
authentication protocols that operate inside the 802.1x framework are suitable for wireless
networks. These protocols allow the network to authenticate the client while also allowing the
client to authenticate the network. In this release, the XT Series supports EAP-TLS (EAP
Transport Layer Security, authentication based on certificates) in addition to EAP-MD5
(authentication based on username/password).
As described in Generating a Certificate Signing Request for XT Series
your own certificates and keys to the XT Series using a PKCS#12 file or you can follow the
manual guided procedure to obtain a .csr file and to upload the signed certificate and Root CA to
the XT Series.
As before, use the following order:
• Generate a certificate signing request (.csr) for 802.1x, associated with the XT Series. Use
the XT Series IP address or DNS name.
• Send the .csr to signing Certificate Authority (CA).
August 2020
Figure 120: Downloading the CSR
Uploading the CA root certificate that you receive from the CA
Deployment Guide for Avaya XT Series
Comments on this document? infodev@avaya.com
on page 243.
on page 239, you can load
242