Configure Certificate Validation Settings - Polycom RealPresence Immersive Studio Administrator's Manual

Setting
Hash Algorithm
Common Name (CN)
Organizational Unit (OU)
Organization (O)
City or Locality (L)
State or Province (ST)
Country (C)
After you create the CSR, the system displays a message indicating that the CSR has been created. Two
links appear next to the signing request that you just created (Signing Request Server or Signing
Request Client).
• Download Signing Request enables you to download the CSR so that it can be sent to a CA for
signature.
• Create enables you to view the fields of the CSR as they are currently set in the CSR. If you
change any of the values you previously configured, you can click Create to generate a new CSR
that can then be downloaded.

Configure Certificate Validation Settings

Certificates are authorized externally when they are signed by the CA. The certificates can be
automatically validated when they are used to establish an authenticated network connection. To perform
this validation, the RealPresence ITP system must have certificates installed for all CAs that are part of
the trust chain. A trust chain is the hierarchy of CAs that have issued certificates from the device being
authenticated, through the intermediate CAs that have issued certificates to the various CAs, leading
back to a root CA, which is a known trusted CA. The following sections describe how to install and
manage these certificates.
A certificate exchange is between a server and a client, both of which are peers. When a user is
accessing the RealPresence ITP system web interface, the RealPresence ITP system is the server and
the web browser is the client application. In other situations, such as when the RealPresence ITP system
Polycom, Inc.
Description
Specifies the hash algorithm for the CSR. You may
select SHA-256 or keep the default SHA-1.
Specifies the name that the system assigns to the
CSR.
Polycom recommends the following guidelines for
configuring the Common Name:
• For systems registered in DNS, use the
Fully Qualified Domain Name (FQDN) of
the system.
• For systems not registered in DNS, use
the IP address of the system.
Specifies the unit of business defined by your
organization.If you want the signed certificate to
include more than one OU field, download and edit
the CSR manually.
Specifies your organization's name.
Specifies the city where your organization is
located.
Specifies the state or province where your
organization is located.
Displays the country selected in Admin Settings >
General Settings > My Information.
Securing the System
42