Polycom DMA 7000 Operation Manual page 35

Certificate Procedures
Polycom, Inc.
Use this procedure to add a trusted certificate authority, either an in-house or
commercial certificate authority.
Caution
Installing or removing certificates requires a system restart and terminates all active
conferences.
When you install or remove a certificate, the change is made to the certificate store
immediately, but the system can't implement the change until it restarts and reads
the changed certificate store.
For your convenience, you're not required to restart and apply a change
immediately. This permits you to perform multiple installs or removals before
restarting and applying the changes. But when you're finished making changes, you
must select Restart to Apply Saved Changes to restart the system and finish your
update. Before you begin, make sure there are no active conferences and you're
prepared to restart the system when you're finished.
To install a certificate for a trusted root CA
Go to Configuration > System > Certificate Management.
1
The installed certificates are listed. The Trusted Root CA entries, if any,
represent the certificate authorities whose public certificates are already
installed on the DMA system and are thus trusted.
If you're using a certificate authority that isn't listed, obtain a copy of
2
your certificate authority's public certificate.
The certificate must be either a single X.509 certificate or a PKCS#7
certificate chain. If it's ASCII text, it's in PEM format, and starts with the
text -----BEGIN CERTIFICATE-----. If it's a file, it can be either PEM or
DER encoded.
In the Actions list, select Add Certificates.
3
In the Add Certificates dialog box, do one of the following:
4
— If you have a file, click Upload certificate, enter the password (if any)
for the file, and browse to the file or enter the path and file name.
— If you have PEM-format text, copy the certificate text, click Paste
certificate, and paste it into the text box below.
Click OK.
5
Verify that the certificate appears in the list as a Trusted Root CA.
6
Click Restart to Apply Saved Changes, and when asked to confirm that
7
you want to restart the system so that certificate changes can take effect,
click OK.
System Security
27