Figure 3-55: Ike Table Listing Loaded Certificate Files - AudioCodes Mediant 2000 User Manual

SIP User's Manual

To apply the loaded certificate for IPsec negotiations:
1. Open the 'IKE Table' page (refer to ''Configuring the IKE Table''
'Loaded Certificates Files' group lists the newly uploaded certificates, as shown below:
2. Click the Apply button to load the certificates; future IKE negotiations are now
performed using the new certificates.
3.3.6.4.2 Client Certificates
By default, Web servers using SSL provide one-way authentication. The client is certain
that the information provided by the Web server is authentic. When an organizational PKI is
used, two-way authentication may be desired: both client and server should be
authenticated using X.509 certificates. This is achieved by installing a client certificate on
the managing PC, and loading the same certificate (in base64-encoded X.509 format) to
the device's Trusted Root Certificate Store. The Trusted Root Certificate file should contain
both the certificate of the authorized user and the certificate of the CA.
Since X.509 certificates have an expiration date and time, the device must be configured to
use NTP (refer to ''Simple Network Time Protocol Support'' on page 451) to obtain the
current date and time. Without the correct date and time, client certificates cannot work.

To enable two-way client certificates:
1. Set the parameter 'Secured Web Connection (HTTPS)' to 'HTTPS Only' (0) in
''Configuring the General Security Settings''
of accessing the device in case the client certificate doesn't work. Restore the previous
setting after testing the configuration.
2. Open the 'Certificates Signing Request' page (refer to ''Server Certificate
Replacement''
3. In the 'Certificates Files' group, click the Browse button corresponding to 'Send
"Trusted Root Certificate Store" file ...', navigate to the file, and then click Send File.
Version 5.8

Figure 3-55: IKE Table Listing Loaded Certificate Files

on page 85 ).
on page 89
87
3. Web-Based Management
on page 92
to ensure you have a method
October 2009
); the