Uploading The Ca Root Certificate That You Receive From The Ca - Avaya XT Series Deployment Manual

• Receive back the Root CA Certificate and the Signed Certificate.
• Load the Root CA Certificate and Signed Certificate to the XT Series.
Important:
Using encryption is subject to local regulation. In some countries it is restricted or limited for
usage. For more information, consult your local reseller.
Before you begin
To generate a certificate signing request, you can use the system IP address or DNS name. If you
use an IP address, please assure that it is a static IP address, since the system generates the
certificate request using its IP address as the Common Name (CN). For more information, see
Configuring Advanced IP Address Settings
you must generate a new CSR.
Procedure
1. From the XT Series web interface, select Administrator Settings > Utilities >
Certificates > 802.1x. From the endpoint's main menu, select Configure > Advanced >
Utilities > Certificates > 802.1x.
2. Follow the procedure described in
Series on page 239.
3. Follow the procedure described in
page 156 to configure 802.1x on each GLAN to use MD5 authentication or TLS
authentication with certificates.

Uploading the CA root certificate that you receive from the CA

You can import the private keys, public keys, the signed certificate, and the CA root certificate
directly into the XT Series using a PKCS#12 file format or you can import the CA root certificate
manually. If the PKCS#12 file does not include all of the correct components, including the signed
certificate and the CA root certificate, you must import the file manually.
You must perform this step separately for TLS (SIP) and HTTPS (Web).
Uploading the CA root certificate manually
Before you begin
You must perform this step separately for TLS and Web.
Procedure
1. From the XT Series web interface, select Administrator Settings > Utilities >
CertificatesTLS or Administrator Settings > Utilities > CertificatesWeb.
2. Import the Certificate Authority (CA) root certificate as follows:
August 2020
Securing Connections to the XT Series Using TLS
on page 154. If you modify the XT Series's IP address,
Generating a Certificate Signing Request for XT
Configuring Advanced Network Connectivity
Deployment Guide for Avaya XT Series
Comments on this document? infodev@avaya.com
on
243