Table of Contents
Advertisement
Certificate Settings
The following table describes the fields on the Certificate Settings page.
Column
Enable OCSP
OCSP responder URL
OCSP certificate
Store OCSP
Configuration
Identifier
Purpose
Expiration
Polycom, Inc.
Description
Enables the use of Online Certificate Status Protocol as a means of obtaining the
revocation status of a certificate presented to the system.
If OCSP responder URL is not specified, the system checks the certificate's
AuthorityInfoAccess (AIA) extension fields for the location of an OCSP responder:
•
If there is none, the certificate fails validation.
•
Otherwise, the system sends the OCSP request to the responder identified in the
certificate.
If OCSP responder URL is specified, the system sends the OCSP request to that
responder.
The responder returns a message indicating whether the certificate is good, revoked, or
unknown.
If OCSP certificate is specified, the response message must be signed by the specified
certificate's private key.
Identifies the responder to be used for all OCSP requests, overriding the AIA field
values.
If OCSP certificate is specified, the response message must be signed by the specified
certificate's private key.
Select a certificate to require OCSP response messages to be signed by the specified
certificate's private key.
Saves the OCSP configuration.
Common name of the certificate.
Kind of certificate:
•
Server SSL is the RealPresence DMA system's public certificate, which it presents to
identify itself. By default, this is a self-signed certificate, not trusted by other devices.
•
Trusted Root CA is the root certificate of a certificate authority that the RealPresence
DMA system trusts.
•
Intermediate CA is a CA certificate that trusted root CAs issue themselves to sign
certificate signing requests (reducing the likelihood of their root certificate being
compromised). If the RealPresence DMA system trusts the root CA, then the chain
consisting of it, its intermediate CA certificates, and the server certificate will all be
trusted.
Expiration date of certificate.
System Security
41
Advertisement
Table of Contents
