Importing Certificates And Certificate Chain Into Trusted Certificate Store - AudioCodes Mediant 1000B User Manual

User's Manual
5. Scroll down the page to the Generate new private key and self-signed certificate
group:
Figure 10-7: Generate new private key and self-signed certificate Group
6. Click Generate Self-Signed Certificate; a message appears (after a few seconds)
displaying the new subject name.
7. Save the configuration with a device reset for the new certificate to take effect.
10.1.6 Importing Certificates and Certificate Chain into Trusted
Certificate Store
The device provides its own Trusted Root Certificate Store. This lets you manage
certificate trust. You can add up to 20 certificates to the store per TLS Context (but this
may be less depending on certificate file size).
The trusted store can also be used for certificate chains. A certificate chain is a sequence
of certificates where each certificate in the chain is signed by the subsequent certificate.
The last certificate in the list of certificates is the Root CA certificate, which is self-signed.
The purpose of a certificate chain is to establish a chain of trust from a child certificate to
the trusted root CA certificate. The CA vouches for the identity of the child certificate by
signing it. A client certificate is considered trusted if one of the CA certificates up the
certificate chain is found in the server certificate directory.
For the device to trust a whole chain of certificates per TLS Context, you need to add them
to the device's Trusted Certificates Store, as described below.

To import certificates into device's Trusted Root Certificate Store:
1. Open the TLS Contexts page (Configuration tab > System menu > TLS Contexts).
2. In the TLS Contexts table, select the required TLS Context index row, and then click
the Context Trusted-Roots
page; the Trusted Certificates page appears.
Version 6.8
Figure 10-8: Certificate Chain Hierarchy
button, located at the bottom of the TLS Contexts
99
10. Configuring SSL/ TLS Certificates
Mediant 1000B Gateway & SBC