Certificate Revocation - Polycom RealPresence 1500 Administrator's Manual

Certificate Revocation

Certificate Revocation of IP Network and peer SIP TLS certificates for each defined IP Service can be
enabled, disabled and configured:
Revocation Method
One of three Certificate Revocation Methods can be selected:
● NONE (Default) - Certificate Revocation is not implemented.
● CRL - Requires at least one CRL file be installed, failing which an error message, At least one CRL
should be installed, is displayed.
● OCSP - When selected, additional configuration options are displayed.
 Global Responder URL
 The format of the URL is validated and must be of the format:
http(s)://responder.example.com/ocsp
 The URL can be either http or https.
 If the Global Responder URL does not respond an Active Alarm is raised.
 Use Responder Specified in Certificate
 The default for this check box is unchecked.
 If the check box is checked Responder URL is taken from the certificate. If the certificate does
not contain a Responder URL, the Global Responder URL is used.
 If the check box is unchecked the Global Responder URL is used. If the Global Responder
URL is incorrectly configured a message, Global responder URL must be configured, is
displayed.
 Allow Incomplete Revocation Checks
If OCSP is selected:
 If the check box is checked and the Global Responder or the Responder Specified in the
Certificate does not respond for any reason the certificate is not considered revoked.
Polycom®, Inc.
Ultra Secure Mode
819