Pkcs 12 Download - Avaya 1230 Administration

Certificate-based authentication
Important:
Before deploying any solution, you must identify what certificate validation criteria is enforced so
that the correct certificate name is requested by the IP Deskphone.
Important:
Some SCEP servers reject all SCEP certificate signing requests that include a Subject Alternate
Name (SAN). The Microsoft Windows 2003 Server version of SCEP is an example where a
certificate request which includes a SAN is always rejected.
During the enrollment process and before the IP Deskphone sends the device certificate request to
the CA server, the IP Deskphone prompts you to enter a challenge password. If the password
feature is disabled in the SCEP server, you do not require a password.
A certificate requested by SCEP is stored in Profile 0 and uses some hard-coded attributes for
requested certificates.
The following table lists additional provisioning file parameters for SCEP support in addition to UI
parameters in the Device settings window.
Table 77: SCEP provisioning parameters
Parameter Purpose
CA SCEP server
CA_DOMAIN Domain
information used
in SCEP request
HOST_NAME Host name
information used
in SCEP request

PKCS 12 download

PKCS#12 is an industry standard for importing and exporting keys and their related certificates. On
the IP Deskphone, this method is only used to import the IP Deskphone device certificate and
private key.
The IP Deskphone can download a PKCS#12 file from the provisioning server. The provisioning
configuration file (for example, 11xxe.cfg), contains the [DEV_CERT] section where the FILENAME
attribute points to the PKCS#12 file name. The file name must include the * symbol which is
SIP Software for Avaya 1200 Series IP Deskphones-Administration
254
Default Allowed
Empty String
Example:
http://47.11.15.206/certsrv/mscep/mscep-err.dll
Empty String
Example:
IpClients.com
Empty String
Example:
1234
Comments? infodev@avaya.com
March 2015