Avaya Scopia XT Series Deployment Manual page 206

Securing your XT Series
Related links
Securing Connections to the XT Series Using TLS
Generating a Certificate Signing Request for 802.1x EAP TLS
Generating a Certificate Signing Request for 802.1x EAP TLS
About this task
You can also configure network security authentication to be 802.1x compliant, where it sends a
username and password to your 802.1x authenticator, which verifies the login with the
authentication server. 802.1x is an Institute of Electrical and Electronics Engineers (IEEE)
standard that provides an authentication framework for WLANs. 802.1x uses the Extensible
Authentication Protocol (EAP) to exchange messages during the authentication process. Several
authentication protocols that operate inside the 802.1x framework are suitable for wireless
networks. These protocols allow the network to authenticate the client while also allowing the
client to authenticate the network. In this release, the XT Series supports EAP-TLS (EAP
Transport Layer Security, authentication based on certificates) in addition to EAP-MD5
(authentication based on username/password).
As described in Generating a Certificate Signing Request for XT Series
your own certificates and keys to the XT Series using a PKCS#12 file or you can follow the
manual guided procedure to obtain a .csr file and to upload the signed certificate and Root CA to
the XT Series.
As before, use the following order:
• Generate a certificate signing request (.csr) for 802.1x, associated with the XT Series. Use
the XT Series IP address or DNS name.
• Send the .csr to signing Certificate Authority (CA).
• Receive back the Root CA Certificate and the Signed Certificate.
• Load the Root CA Certificate and Signed Certificate to the XT Series.
Important:
Using encryption is subject to local regulation. In some countries it is restricted or limited for
usage. For more information, consult your local reseller.
Before you begin
To generate a certificate signing request, you can use the system IP address or DNS name. If you
use an IP address, please assure that it is a static IP address, since the system generates the
certificate request using its IP address as the Common Name (CN). For more information, see
Configuring Advanced IP Address Settings
you must generate a new CSR.
Procedure
1. From the XT Series web interface, select Administrator Settings > Utilities >
Certificates > 802.1x. From the endpoint's main menu, select Configure > Advanced >
Utilities > Certificates > 802.1x.
2. Follow the procedure described in
Series on page 202.
December 2017
on page 126. If you modify the XT Series's IP address,
Generating a Certificate Signing Request for XT
Avaya Video Collaboration Solution for IP Office Deployment Guide
Comments on this document? infodev@avaya.com
on page 201
on page 206
on page 202, you can load
206