Generating A Certificate Signing Request For Xt Series - Avaya Scopia XT Series Deployment Manual

Securing your XT Series
while also allowing the client to authenticate the network. XT Series supports EAP-TLS (EAP-
Transport Layer Security, authentication based on certificates) in addition to EAP-MD5
(authentication based on username/password).
You can load your own certificates and keys to the XT Series using a PKCS#12 file or you can
follow the manual guided procedure to obtain a .csr file and to upload the signed certificate and
Root CA to the XT Series.
1. Perform

Generating a Certificate Signing Request for XT Series

request to the Certificate Authority.
2. Receive back the Root CA and signed certificate and perform
certificate that you receive from the CA
As an example, the following set of procedures secure the connection between XT Series and
other devices. Perform these tasks in the order listed below:
1. Perform Generating a Certificate Signing Request for XT Series
2. Perform Enabling the TLS Connection in XT Series
3. If you used a different CA for XT Series from the one used for Equinox Management,
upload the XT Series's CA root and intermediate certificates into Equinox Management as
described in Administrator Guide for Equinox Management.
4. To encrypt the media (audio, video, presentation) of videoconferences using the SRTP
protocol, perform
Related links
Securing your XT Series
Generating a Certificate Signing Request for XT Series
Uploading the CA root certificate that you receive from the CA
Backing Up and Restoring XT Series Certificates
Deleting XT Series Certificates
Enabling the TLS Connection in XT Series
Enabling Encryption for Videoconferences
Generating a Certificate Signing Request for XT Series
About this task
This section explains how to generate and upload the TLS or HTTPS web certificate for Avaya
®
Scopia XT Series that is used for encrypting communications with other video network devices.
Important:
Using encryption is subject to local regulation. In some countries it is restricted or limited for
usage. For more information, consult your local reseller.
To create a TLS or HTTPS web certificate, you need to generate a certificate signing request
(CSR) and send it to the certification authority (CA) for signing. A CA has its own certificate,
known as the CA root certificate. When the CA signed certificate is ready, you upload it into the XT
December 2017
Enabling Encryption for Videoconferences
on page 195
on page 211
on page 213
on page 215
Avaya Video Collaboration Solution for IP Office Deployment Guide
Comments on this document? infodev@avaya.com
on page 207.
on page 213.
on page 215.
on page 202
on page 207
on page 210
on page 202 and send the
Uploading the CA root
on page 202.
202