9608 Phones using Certificates

[techalum]

Hello everyone!
I have an issue that even Avaya can't seem to figure out. After the POODLE vulnerability in October showed up, we were forced to change our settings on our firewalls from aggressive mode to main mode. The Avayas use aggressive but can use certificates as a way around that. At the moment we have IKE Phase 1 errors. This is because I can't seem to download the cert to the phones. Once I figure out how to do this, I can attack the ASA side of the house which shouldn't be a problem. Has anyone else run into this issue?
Setting up a 9608 on IP Office
Thanks,
techalum

 

[intrigrant]

It will not work on current version IP Office, wait to the 22th of December, then release 9.1 comes and that version will support certificates for IP Phones and it comes with the right docs how to deploy them.

 

[derfloh]

I think the OP wants to user certificates to connect to VPN and not for voice encryption...

 

[techalum]

That is correct. I am looking for a way to connect to VPN via certificates.