Certificate Configuration And Management - Polycom RealPresence 4000 Administrator's Manual

Secure Communication Mode
The RMX™ can be configured to work in Secure Mode or Ultra Secure Mode. For more
information see "Ultra Secure Mode" on page
In Secured mode the RMX and the Collaboration Server Web Client are configured to work
with SSL/TLS.
In this mode, a SSL/TLS Certificate is installed on the MCU, setting the MCU Listening Port
to secured port 443.
TLS is a cryptographic protocol used to ensure secure communications on public networks.
TLS uses a Certificate purchased from a trusted third party Certificate Authority to authenticate
public keys that are used in conjunction with private keys to ensure secure communications
across the network.
The RMX supports:
•
•
SSL 3.0 utilizes 1024-bit RSA public key encryption.
TLS certificates can be generated using the following methods: CSR, PFX and PEM; each
giving different options for Encryption Key length. Table F-1 lists the SIP TLS Encryption Key
length support for the various system components.
Table F-1
System Component
SIP Signaling
Management
LDAP

Certificate Configuration and Management

All Polycom devices used in a Maximum Security Environment require security certificates.
For more details see the Ultra Secure Mode chapter, "Certificate Management" on page 1-5.
Certificate Template Requirements
The specific security certificate requirements for Collaboration Servers used in Maximum
Security Environments are:
•
Polycom, Inc.
TLS 1.0
SSL 3.0 (Secure Socket Layer)
SIP TLS - Encryption Key Support by System Component
Key Generation Method
CSR
PFX / PEM
CSR
Support of 2048-bit encryption keys.
Appendix F
1-1 and "" on page 21-38.
Key Length (bits)
2048
1024 or 2048
2048
Key generated by
RMX
User
RMX
F-1