Networkservices Https Mode; Networkservices Https Ocsp Mode; Networkservices Https Verifyservercertificate; Networkservices Https Verifyclientcertificate - Cisco C20 TelePresence System Administrator's Manual

Cisco TelePresence System Quick Set C20 and Profiles using C20
Contents

NetworkServices HTTPS Mode

HTTPS is a web protocol that encrypts and decrypts user page requests as well as the pages
that are returned by the web server.
NOTE: Restart the system for any change to this setting to take effect.
Requires user role: ADMIN
Value space: <Off/On>
Off: The HTTPS protocol is disabled.
On: The HTTPS protocol is enabled.
NetworkServices HTTPS Mode: On
Example:

NetworkServices HTTPS VerifyServerCertificate

When the video system connects to an external HTTPS server (like a phone book server or an
external manager), this server will present a certificate to the video system to identify itself.
Requires user role: ADMIN
Value space: <Off/On>
Off: Do not verify server certificates.
On: Requires the system to verify that the server certificate is signed by a trusted Certificate
Authority (CA). This requires that a list of trusted CAs are uploaded to the system in advance.
NetworkServices HTTPS VerifyServerCertificate: Off
Example:

NetworkServices HTTPS VerifyClientCertificate

When the video system connects to a HTTPS client (like a web browser), the client can be
asked to present a certificate to the video system to identify itself.
Requires user role: ADMIN
Value space: <Off/On>
Off: Do not verify client certificates.
On: Requires the client to present a certificate that is signed by a trusted Certificate
Authority (CA). This requires that a list of trusted CAs are uploaded to the system in advance.
NetworkServices HTTPS VerifyClientCertificate: Off
Example:
D14637.10 Profile C20 and Quick Set C20 Administrator Guide TC6.1, APRIL 2013.
Introduction Web interface System settings System settings

NetworkServices HTTPS OCSP Mode

Define the support for OCSP (Online Certificate Status Protocol) responder services. The OCSP
feature allows users to enable OCSP instead of certificate revocation lists (CRLs) to check the
certificate status.
For any outgoing HTTPS connection, the OCSP responder is queried of the status. If the
corresponding certificate has been revoked, then the HTTPS connection will not be used.
Requires user role: ADMIN
Value space: <Off/On>
Off: Disable OCSP support.
On: Enable OCSP support.
NetworkServices HTTPS OCSP Mode: Off
Example:
NetworkServices HTTPS OCSP URL
Specify the URL of the OCSP responder (server) that will be used to check the certificate
status.
Requires user role: ADMIN
Value space: <S: 0, 255>
Format: String with a maximum of 255 characters.
NetworkServices HTTPS OCSP URL: "http://ocspserver.company.com:81"
Example:
www.cisco.com — Copyright © 2010-2013 Cisco Systems, Inc. All rights reserved.
72
Administrator Guide
Setting passwords Appendices