Obtaining A Server Certificate - Cisco SPA942 - - IP Phone Administration Manual

7
STEP 1
STEP 2
STEP 3
STEP 4
146
each individual endpoint. A certificate authority root certificate capable of
authenticating the device client certificate is given to each service provider. This
authentication path allows the provisioning server to reject unauthorized requests
for configuration profiles.

Obtaining a Server Certificate

To obtain a server certificate:
Contact a Cisco/Linksys support person who will work with you on the certificate
process.
Generate a private key that will be used in a CSR (Certificate Signing Request).
This key is private and you do not need to provide this key to Cisco support. Use
open source "openssl" to generate the key. For example:
openssl genrsa -out <file.key> 1024
Generate CSR a that contains fields that identify your organization, and location.
For example:
openssl req -new -key <file.key> -out <file.csr>
You must have the following information:
• Subject field—Enter the Common Name (CN) that must be a FQDN (Fully
Qualified Domain Name) syntax. During SSL authentication handshake, the
SPA9000 verifies that the certificate it receives is from the machine that
presented it.
• Server's hostname—For example, provserv.domain.com.
• Email address—Enter an email address so that customer support can
contact you if needed. This email address is visible in the CSR.
Email the CSR (in zip file format) to the Cisco/Linksys support person. The
certificate is signed by Cisco and given to you.
Cisco SPA and Wireless IP Phone Administration Guide
Provisioning Basics
Using HTTPS