Purchasing And Installing A Certificate - Polycom RealPresence 4000 Administrator's Manual

Purchasing and Installing a Certificate

Once a certificate is purchased and received it is stored in the RMX and used for all
subsequent secured connections. For more information see the Ultra Secure Mode chapter,
"Adding Certificates to the Certificate Repository" on page 1-6.
Certificates are deleted when an administrator performs a Restore Factory Defaults with the
Comprehensive Restore option selected.
Creating/Modifying System Flags
The following System Flags in system.cfg control secure communications.
•
•
Table F-2, below, lists both flags and their settings.
If the System Flag, RMX_MANAGEMENT_SECURITY_PROTOCOL does not exist in the system, it
must be created by using the Setup menu.
For more information see "Modifying System Flags" on page 21-1.
Table F-2
Flag
RMX_MANAGEMENT_S
ECURITY_PROTOCOL
EXTERNAL_DB_PORT
The RMX must be restarted for modified flag settings to take effect.
Enabling Secure Communication Mode
After the SSL/TLS Certificate is installed, secure communications are enabled by modifying
the properties of the Management Network in the Management Network properties dialog box.
When Secure Communications Mode is enabled:
•
•
•
•
To enable secure communications mode:
1
2
3
Polycom, Inc.
RMX_MANAGEMENT_SECURITY_PROTOCOL
EXTERNAL_DB_PORT
System Flags
Description
Enter the protocol to be used for secure communications.
Default: TLSV1_SSLV3 (both)..
The external database server port used by the RMX to send and
receive XML requests/responses.
For secure communications set the value to 443.
Default: 5005.
Only https:// commands from the browser to the Control Unit IP Address of the
RMX are accepted.
The RMX listens only on secured port 443.
All connection attempts on port 80 are rejected.
A secure communication indicator ( ) is displayed in the browser's status bar.
In the RMX Management pane, click IP Network Services.
In the IP Network Services list pane, double-click the Management Network entry.
Click the Security tab.
Appendix F-Secure Communication Mode
F-3