Generating A Certificate Signing Request - Polycom CX5500 Administrator's Manual

Polycom CX5500 Unified Conference Station Administrator's Guide
Web Info: Using Custom Device Certificates With Polycom Phones
As of UC Software 4.0.0, you can install custom device certificates on your Polycom phones. These
certificates are installed in the same way custom CA certificates are installed. See
17877: Using Custom Certificates With Polycom
To determine if there is a device certificate on a CX5500 system:
1 Tap Settings > Advanced > Admin Settings > TLS Security > Custom Device Certificates.
You can view the Polycom device certificate on the phone at Settings > Status > Platform >
Phone.
2 Tap the Info soft key to view the certificate.
One of the following messages will be displayed:

Device Certificate: Installed or Device Certificate: Factory Installed is displayed if the
certificate is available in flash memory, all the certificate fields are valid (listed above), and the
certificate has not expired.

Device Certificate: Not Installed is displayed if the certificate is not available in flash memory
(or the flash memory location where the device certificate is to be stored is blank).

Device Certificate: Invalid is displayed if the certificate is not valid.
Note: Device Certificate Shown as Self-Signed
Some Polycom phones manufactured after December, 2011 report the device certificate as 'self-
signed' and not as 'Factory Installed'. The difference indicates that different issuing CAs were used
to generate the certificates. As long as the authenticating server trusts the Polycom Root CA that
issued these certificates, the phones will operate correctly.

Generating a Certificate Signing Request

You may need a certificate to perform a number of tasks, for example, multiple TLS authentication. To
obtain a certificate you need to:
●
Request a certificate from a Certificate Authority (CA) by creating a certificate signing request
(CSR).
Forward the CSR to a CA to create a certificate. If your organization doesn't have its own CA, you
●
will need to forward the CSR to a company like Symantec. If successful, the CA will send back a
certificate that has been digitally signed with their private key.
After you receive the certificate, you can download it to the phone:
●
Using a configuration file
Through the phone's user interface
●
●
Through the Web Configurable Utility
Polycom, Inc.
Phones.
1.1.0
Technical Bulletin
179