Configuring Certificates - AudioCodes Mediant 600 User Manual

Notes:
3.3.1.5

Configuring Certificates

The 'Certificates' page is used for HTTPS and SIP TLS secure communication. This page
allows you to perform the following:

Replacing the server certificate (see ''Server Certificate Replacement'' on page 62)

Replacing the client certificates (see ''Client Certificates'' on page 64)

Regenerating Self-Signed Certificates (see ''Self-Signed Certificates'' on page 65)

Automatic update of the Private key (installed automatically from a file located on an
HTTPS server, defined using the HTTPSPkeyFileName parameter). For a detailed
description on automatic update methods, refer to the Product Reference Manual.
Note:
3.3.1.5.1 Server Certificate Replacement
The device is supplied with a working Secure Socket Layer (SSL) configuration consisting
of a unique self-signed server certificate. If an organizational Public Key Infrastructure
(PKI) is used, you may wish to replace this certificate with one provided by your security
administrator.

To replace the device's self-signed certificate:
1. Your network administrator should allocate a unique DNS name for the device (e.g.,
dns_name.corp.customer.com). This DNS name is used to access the device and
therefore, must be listed in the server certificate.
2. If the device is operating in HTTPS mode, then set the HTTPSOnly parameter to
'HTTP and HTTPS' (0) - see ''Configuring Web Security Settings'' on page 69. This
ensures that you have a method for accessing the device in case the new certificate
doesn't work. Restore the previous setting after testing the configuration.
SIP User's Manual
•
If the device is configured to obtain the date and time from an SNTP
server (see ''Configuring Application Settings'' on page 58), the fields on
this page are read-only and cannot be modified.
•
For an explanation on SNTP, see ''Simple Network Time Protocol
Support'' on page 403.
•
After performing a hardware reset, the date and time are returned to their
defaults and therefore, should be updated.
The device is shipped with a configured certificate, therefore, configure
certificates only if required.
62
Mediant 600 & Mediant 1000
Document #: LTRT-83308