Procedure 5: Enable Secured Communication; Enabling Secure Mode; Purchasing A Certificate - Polycom 1500 Deployment Manual

Procedure 5: Enable Secured Communication

If the ULTRA_SECURE_MODE System Flag is set to YES, a valid TLS certificate must be
installed, and a secured connection between the RMX Web Client (or RMX Manager) and the
RMX unit must be defined.
•
•
•
•
•
For more information see the RealPresence Collaboration Server (RMX®) 1500/2000/4000
Administrator's Guide, "Ultra Secure Mode" on page F-7.

Enabling Secure Mode

The following operations are required to switch the RMX to Secure Mode:
•
•
.

Purchasing a Certificate

Once a certificate is purchased and received it is stored in the RMX and used for all
subsequent secured connections.
To create/purchase a certificate:
1
Polycom, Inc.
If the ULTRA_SECURE_MODE System Flag is set to YES and the Management Network
Service has not yet been configured to be secured, an Active Alarm is created and a
message is displayed stating that Secured Communications Mode must be enabled.
If the ULTRA_SECURE_MODE System Flag is set to YES and a valid TLS certificate has
not been installed, an Active Alarm is created and a message is displayed stating that the
system is in Ultra Secure Mode but Secured Communications Mode is not enabled until the
TLS certificate is installed.
If the ULTRA_SECURE_MODE System Flag is set to YES and Secured Communications
Mode is enabled, the user is not able to disable Secured Communications Mode. An error
message is displayed stating that Secured Communications Mode cannot be disabled
while in Ultra Secure Mode.
TLS private keys saved by the current version when the ULTRA_SECURE_MODE
System Flag is set to YES are not compatible with TLS private keys saved by previous
RMX versions. An Active Alarm is created and a message is displayed requesting that a
new TLS certificate be installed.
TLS private keys saved by the current version will be compatible with TLS private keys
saved by future RMX versions.
Purchase and install the necessary SSL/TLS certificates:
— Certificate
— CA Certificate(s)
— CRL
Certificates are managed using the Certification Repository dialog box accessed through
the RMX Web Client / RMX Manager, Setup menu.
Modify the Management Network settings
In the RMX menu, click Setup > Secured RMX Communications > Create certificate
request.
Chapter 1-First Time Installation and Configuration
1-45