Certificate Administration - Avaya 1230 Administration

Certificate-based authentication
4. After the IP Deskphone starts a TLS channel with a server (EAP or TLS) and receives a
server certificate, the IP Deskphone validates the certificate by checking the availability of
the certificate in the CTL and to decide whether to trust the certificate or not. If the server
certificate is not in the CTL, the server certificate is rejected and a TLS channel is not
established.
The administrator has to ensure that the CTL is up-to-date. If a new CTL is downloaded to the IP
Deskphone, the old CTL file is overwritten by the new one.
The IP Deskphone can trust up to ten server certificates in the CTL file.
The following is an example of a CTL file.
Figure 27: Example of a CTL file

Certificate Administration

The administrator can view and delete certificates. Because a certificate can be deleted, it is critical
that the administrator password to access this function is protected and limited only to those
individuals who absolutely require it.
Certificate administration is accessed through the Diagnostics menu .
To view Certificate Administration option in Diagnostics menu, configure the following parameter in
Security Policy:
SIP Software for Avaya 1200 Series IP Deskphones-Administration
258
Comments? infodev@avaya.com
March 2015