RADVision Scopia TIP Gateway Deployment Manual page 55

When CA3 is untrusted
55), the certificates to upload to the Scopia Management are:
–
–
–
–
On the gateway side, the certificates to be uploaded are
Certificate from Unknown CA
–
–
• Unknown Scopia Management CA
When Scopia Management's certificate is signed by a CA unknown to the gateway, you must
upload an intermediate certificate for the untrusted CA signed by a trusted CA to vouch for its
authenticity.
In the example of
page 56, Scopia Management's certificate is signed by CA3, an unknown CA, while the
gateway's certificate is signed by CA2, a trusted CA. This requires four certificates to be uploaded
to Scopia Management and three for the gateway
Certificate from Unknown CA
Deployment Guide for Scopia TIP Gateway Version 8.2
Figure 36: Signature of Gateway Certificate from Unknown CA
(Figure 36: Signature of Gateway Certificate from Unknown CA
A certificate identifying Scopia Management, signed by trusted CA1. This is sent to the
gateway as part of the TLS negotiation.
A root certificate from CA1 verifying CA1's identity, self-signed by trusted CA1. This is used
by Scopia Management to authenticate its certificate.
An intermediate certificate vouching for the trustworthiness of CA3, signed by trusted CA2.
This is used to trust the certificate sent by the gateway, which is signed by CA3.
A root certificate from CA2 verifying CA2's identity, self-signed by trusted CA2. This is used
by Scopia Management to authenticate the intermediate certificate, which is signed by CA2.
on page 55):
A certificate identifying the gateway, signed by CA3, an unknown CA. This certificate is sent
to Scopia Management as part of the TLS negotiation.
A root certificate from CA1 verifying CA1's identity, self-signed by trusted CA1. This is used
by the gateway to verify the certificate sent by Scopia Management, which is signed by CA1.
Figure 37: Signature of Scopia Management Certificate from Unknown CA
on page 56).
(Figure 36: Signature of Gateway
(Figure 37: Signature of Scopia Management
Securing Your Video Network Using TLS | 55
on page
on