Required It Infrastructure; Dns; Ntp Servers; Certificate Authority Server - Polycom 1500 Deployment Manual

Polycom RealPresence Collaboration Server (RMX)1500/2000/4000 Deployment Guide for Maximum Security Environments

Required IT Infrastructure

The following IT infrastructure components are required to secure the RMX conferencing
(audio and video) solution.
•
•
•
•

DNS

All systems that are part of the secure solution, whether IT infrastructure or Polycom devices,
must be configured with the capability to resolve all other Polycom and other IT
infrastructure device Host Names on the network. This includes all workstations used to
access the RMX Management Network such as the RMX Web Client or RMX Manager.
The easiest way to do this is to use a DNS server to ensure that each device in the
deployment can be identified by a Host Name or Fully Qualified Domain Name (FQDN).
•
•
•

NTP Servers

In order to meet Maximum Security requirements, a secure audio and video conferencing
environment must include at least two NTP servers. Security certificates are not required for
NTP servers.

Certificate Authority Server

A certificate authority (CA) server is used to issue and manage security credentials. A CA
server is an integral part of a (Public Key Infrastructure) PKI security system and is a required
component of a Maximum Security Environment.
•
•
•
•
1-2
External Domain Name Server (DNS)
Network Time Protocol (NTP) server
Certificate Authority server.
Certificate Revocation List (CRL) distribution point for each Certificate Authority (CA) used
in the configuration
Devices must have FQDNs in order to use security certificates.
In dual stack network configurations that support both IPv4 and IPv6, both IP
addresses must be included in the DNS configuration.
When connecting to devices within the IT infrastructure from Polycom devices, the
FQDN of the respective machines should be used.
Polycom products must be able to resolve the CA server using its Fully Qualified Domain
Name (FQDN).
With the exception of the NTP servers, all networked components within the Maximum
Security Environment must have a valid certificate or certificate chain. A Certificate
Revocation policy and a Certificate Revocation method for all networked components
must also be established.
Certificates issued for Polycom devices within a Maximum Security Environment must
meet the specific requirements as described in the RealPresence® Collaboration Server
Administrator's Guide, "Certificate Configuration and Management" on page
For certificate management, networked components within the Maximum Security
Environment can use either an Online Certificate Status Protocol (OCSP) responder or
Certificate Revocation Lists (CRLs). The RMX currently supports only CRLs. For more
F-1.
Polycom, Inc.