Ocs And Exporting The Certificate To The Rmx Workstation - Polycom RMX 1500 Administrator's Manual

PFX Method - Creating the Security (TLS) Certificate in the

OCS and Exporting the Certificate to the RMX Workstation

2
Set up a matching URI route to the RMX/DMA by right-clicking the
OCS Pool, selecting Properties > Front End Properties > Routing
Tab and follow the instructions in "Setting the Static Route for RMX in
the OCS" on page H-11.
•
When defining both routing methods, you cannot add an RMX as an
Authorized Host using the Front End Properties > Host Authorization tab.
There can only be one trusted service entry for the RMX even though there
are two different routes to the RMX (i.e., Matched URI and numerical
dialing). If the Matched URI routing method was previously defined and the
RMX was set as trusted host, and you are adding the numerical dialing
method, you have to remove the RMX from the Trusted Hosts list. For more
Optional. Removing the RMX from the Host Authorization
details, see "
List"
on page H-17.
• Only TLS connections to the RMX will work, TCP connections will not work.
If you are using the PFX method to create and send the security certificate
to the RMX, certificate files rootCA.pem, pkey.pem and cert.pem must be sent
to the RMX unit. These files can be created and sent to the RMX in two
methods:
• The files rootCA.pem, pkey.pem and cert.pem are provided by a
Certificate Authority and are sent independently or together with a
password file to the RMX. This is the recommended method.
• Alternatively, the TLS certificate files are created internally in the
OCS and exported to the RMX workstation from where the files can
be downloaded to the RMX. If the certificate is created internally by
the OCS, one *.pfx file is created. In addition, a text file containing the
password that was used during the creation of the *.pfx file is
manually created. Both files can then be sent from the RMX
workstation to the RMX unit. When the files are sent to the RMX, the
*.pfx file is converted into three certificate files: rootCA.pem, pkey.pem
and cert.pem.
Sometimes, the system fails to read the *.pfx file and the conversion
process fails. Resending *.pfx file again and then resetting the system
may resolve the problem.
The following procedure describes how to create the *.PFX file in the OCS
and export it so it can be sent to the Certificate Authority or to the RMX.
Polycom RMX 1500/2000/4000 Administrator's Guide
H-29