Geographical Restrictions On Encryption; Certificate Management - Avaya J100 Series Installing And Administering

The parameter PROVIDE_NETWORKINFO_SCREEN controls the display information.
OpenSSH/OpenSSL version
The phone displays the version of OpenSSL and OpenSSH on the VIEW screen in the ADMIN
menu. To see this information, set the parameter DISPLAY_SSL_VERSION to 1.
SSH Fingerprint
The phone displays the SSH fingerprint to manually verify that an SSH connection is established
with the correct phone.
Time synchronization
The phone synchronizes the time with the configured NTP servers in intervals. Use the parameter
SNTP_SYNC_INTERVAL to check the time interval for synchronization. The range is 60 to 2880
minutes, and the default is 1440 minutes.

Geographical restrictions on encryption

Starting from R.4.0.4., SRTP is not supported on Avaya J100 Series IP Phones sold in Russia,
Belarus, Kazakhstan, Kyrgyzstan, and Armenia to meet local restrictions on the use of encryption.
On such phones, the settings related to SRTP are excluded both from the phone interface and the
web interface, and the administrator cannot enable SRTP.

Certificate management

Certificates are used to establish secure communication between network entities. Server or
mutual authentication can be used to establish a secure connection between a client and server.
The client always validates the certificate of the server and maintains a trust store to support this
validation. If the server additionally requires mutual authentication, it requests an identity
certificate from the client. The identity certificate must be provided by the client and validated by
the server to establish mutual authentication. Server must validate the identity certificate to
establish a secure connection.
Phones support three types of certificates:
• Trusted certificates
• Online Certificate Status Protocol (OCSP) trust certificates
• Phone identity certificates
The Trusted and OCSP trust certificates are root or intermediate Certification Authority (CA)
certificates that are installed on the phone through the 46xxsettings.txt file.
Enhancements for installing identity certificates:
• SCEP over HTTPS is supported for enrollment.
• PKCS#12 file format is supported for installation.
April 2020 Installing and Administering Avaya J100 series IP Phones in an Open SIP
Comments on this document? infodev@avaya.com
Geographical restrictions on encryption
environment 261