AES Server Certs

[trilogy8]

We provide AES certs from our own PKI. The web and AESERVICES certs are to expire in a few weeks. If we are not using AES for cert based auth to other systems (MS), would everything still function if they expire? We use AES for call recording integration which isn't using certificates. We are still going to renew the certs, but just curious what they are actually used for.

 

[kyle555]

secure DMCC and TSAPI
If you have Avaya WFO or other apps from Avaya, you don't need AES licenses for them - you paid for them when you bought an Avaya recorder with those licenses.

So, it needs secure TSAPI to do a special handshake to prove it's from Avaya and work on AES without having any licenses.

But, if you have your own Nice or Verint using regular TSAPI unencrypted, that won't break anything.

Still best to keep them current though.

 

[trilogy8]

What's the best way to do these.. cut the CSR from the server itself? looks like you have to delete the current aeservices cert before you can do the CSR.

 

[kyle555]

Yea. It's well documented since the default server cert was set to expire in 2016 or something. There's a PSN about it.