Avaya Scopia XT Series Deployment Manual page 200

Securing your XT Series
(authentication), that the entity cannot deny having signed the data (non-repudiation), and that the
data was not altered (integrity).
A digital signature is the digital equivalent of a handwritten signature or stamped seal, but offering
far more inherent security. A digital signature is commonly used when it is important to detect
forgery or tampering. As an electronic analogue of a written signature, a digital signature provides
assurance that:
• the claimed signatory has signed the information.
• the information was not modified after signature generation.
Digital signatures are based on public key cryptography, also known as asymmetric cryptography.
CAdES (CMS Advanced Electronic Signatures) is a set of extensions to Cryptographic Message
Syntax (CMS) signed data making it suitable for advanced electronic signatures. CAdES files have
p7m extension and can be validated using publicly available software.
To add a digital signature for an USB recorded video, the XT Series creates a one-way hash of the
mp4 file (using SHA256). The value of the hash is unique to the recorded video. Any change in the
data, even changing or deleting a single video frame, results in a different hash value.
This hash is then signed with a customer loaded digital signature (or a default one generated by
the XT Series) and the resulting signed hash (along with other information about the signer's and
root CA certificate) is stored as a p7m file in the USB storage, together with the recorded video.
When the recorded mp4 file is validated by the XT Series, the XT Series is able to detect if the
recorded video hash corresponds to the digital signed data contained in the associated p7m file,
and also to display information about the signing entity. The p7m file can also be used by a third
party to validate the recorded file signature (for instance using online p7m validators).
You can load your own certificates and keys to the XT Series using a PKCS#12 file or you can
follow the manual guided procedure to obtain a .csr file and to upload the signed certificate and
Root CA to the XT Series.
1. Perform Generating a Certificate Signing Request for XT Series
request to the Certificate Authority.
2. Receive back the Root CA and signed certificate and perform
certificate that you receive from the CA
Note:
If you do not upload a valid certificate to sign the recording files, the XT Series uses a self-
signed certificate, if configured. Self-signed certificates do not offer the same level of security
as certificates signed by an official Certificate Authority.
Note:
Ensure that you store your digital signature certificate in a safe place. If you restore your XT
Series to the factory settings, the digital signature certificate is lost. Your digital signature
certificate must be uploaded to the XT Series to verify the integrity of the recorded files using
the XT Series.
Related links
Securing your XT Series
December 2017
on page 195
Avaya Video Collaboration Solution for IP Office Deployment Guide
Comments on this document? infodev@avaya.com
on page 207.
on page 202 and send the
Uploading the CA root
200