Certificate Management - Avaya J100 Series Installing

Security
Temporary Data
The phone deletes any temporary storage data from the program, variables, cache, main memory,
registers, and stack.
IP information
The phone enables the user to see the IP information on the phone screen.
The parameter PROVIDE_NETWORKINFO_SCREEN controls the display of this information.
OpenSSH/OpenSSL version
The phone displays the version of OpenSSL and OpenSSH on the VIEW screen in the
Administration menu. This information is displayed when the parameter DISPLAY_SSL_VERSION
is set to 1.
SSH Fingerprint
The phone displays SSH fingerprint to manually verify that an SSH connection is established with
the correct phone.
Time synchronization
The phone synchronizes the time with the configured NTP servers at intervals. The parameter
SNTP_SYNC_INTERVAL checks the time interval for synchronization any time between 60 to
2880 minutes with 1440 as the default setting
• Default: 1440 minutes
• 60–2880 minutes

Certificate management

Certificates are used to establish secure communication between network entities. Server or
mutual authentication can be used to establish a secure connection between a client and server.
The client always validates the certificate of the server and maintains a trust store to support this
validation. If the server additionally requires mutual authentication, it requests an identity
certificate from the client. The identity certificate must be provided and validated by the server to
establish mutual authentication. Server must validate the identity certificate to establish a secure
connection..
Phones support three types of certificates:
• Trusted certificates
• Online Certificate Status Protocol (OCSP) trust certificates
• Phone identity certificates
The Trusted and OCSP trust certificates are root or intermediate Certification Authority (CA)
certificates that are installed on the phone through the 46xxsettings.txt file.
Enhancements for installing identity certificates:
• SCEP over HTTPS is supported for enrollment.
December 2018 Installing and Administering Avaya J100 Series IP Phones
Comments on this document? infodev@avaya.com
138