Enabling Encryption For Videoconferences - Avaya Scopia XT Series Deployment Manual

Field
Verify Certificate Revocation
3. Select Save.
4. (Optional) If required by your organization's security policies, continue with
Encryption for Videoconferences
Related links
Securing Connections to the XT Series Using TLS

Enabling Encryption for Videoconferences

You can add security to videoconferences (SIP and H.323 calls) using encryption. The call detail
records and the Statistics page display information regarding the encryption status of the
videoconference.
About this task
The system can secure videoconference sessions via encrypted connections, in both point-to-
point calls and videoconferences, as follows:
• For SIP connections, you can encrypt the actual media of SIP connections via SRTP.
Secure Real-time Transport Protocol (SRTP) adds security to the standard RTP protocol,
which is used to send media (video and audio) between devices in SIP calls. It offers security
with encryption, authentication and message integrity. The encryption uses a symmetric key
generated at the start of the call, and being symmetric, the same key locks and unlocks the
data. So to secure transmission of the symmetric key, it is sent safely during call setup using
TLS.
• For H.323 connections, encryption is enabled via H.235.
H.235 is the protocol used to authenticate trusted H.323 endpoints and encrypt the media
stream during meetings.
Configure settings for securing calls as described in the procedure below. You can have up to
three remote encrypted participants in a videoconference.
December 2017
on page 215.
Avaya Video Collaboration Solution for IP Office Deployment Guide
Comments on this document? infodev@avaya.com
Securing Connections to the XT Series Using TLS
Description
Select Yes always to ensure that the XT Series
checks if the certificate has been revoked. It
treats indeterminate results as failures.
Select Yes if possible to check if the certificate
has been revoked and to reject certificates
which have been known to be revoked but to
allow certificates if the result of the check is
indeterminate due to missing revocation
information in the certificate or a failure to check
the revocation status, such as in situations
where there is no response from the OCSP
responder, or an inability to download the CRL,
and so on.
Select No to disable certificate checking.
on page 201
Enabling
215