Appendix F- Secure Communication Mode; Certificate Configuration And Management - Polycom 1500 Administrator's Manual

Appendix F- Secure Communication
Mode
The RealPresence Collaboration Server can be configured to work in Secure Mode or Ultra Secure Mode.
For more information see
Secure Mode .
In Secured mode the Collaboration Server and the Collaboration Server Web Client are configured to work
with SSL/TLS.
In this mode, a SSL/TLS Certificate is installed on the MCU, setting the MCU Listening Port to secured port
443.
TLS is a cryptographic protocol used to ensure secure communications on public networks. TLS uses a
Certificate purchased from a trusted third party Certificate Authority to authenticate public keys that are used
in conjunction with private keys to ensure secure communications across the network.
The Collaboration Server supports:
● TLS 1.0
● SSL 3.0 (Secure Socket Layer)
SSL 3.0 utilizes 1024-bit RSA public key encryption.
TLS certificates can be generated using the following methods: CSR, PFX and PEM; each giving different
options for Encryption Key length. The table below lists the SIP TLS Encryption Key length support for the
various system components.
SIP TLS - Encryption Key Support by System Component
System Component
SIP Signaling
Management
LDAP

Certificate Configuration and Management

All Polycom devices used in a Maximum Security Environment require security certificates.
For more details see the Ultra Secure Mode chapter,
Polycom®, Inc.
Ultra Secure Mode and
Key Generation Method
CSR
PFX / PEM
CSR
Flags Specific to Maximum Security Environments - Ultra
Key Length (bits)
2048
1024 or 2048
2048
Certificate Management
Key generated by
Collaboration
Server
User
Collaboration
Server
.
983