AVAYA AURA + SBCE + TLS

[MisterRobot_imported]

Hello everyone,
i hope you doing well due to COVID-19.

i have avaya aura solution 8.0 (SMGR + CM + SM + AADS + AAWG + Equinox MGMT + EQUINOX MEDIA SERVER ETC..) + Avaya SBCE .
we are using TLS for Equinox (mobile + desktop) and for WebRTC .
all is setup correctly with certifications with our CA is SMGR.
the question is , when a guest is connecting from home using webRTC , we should use and add another certificat CA public like GoDaddy for the SBCE ?

any experience or suggestion about this maybe share it on comment .

Best Regards

 

[kyle555]

Yea. SMGR's CA isn't fine tuned to keep up with changes on the public internet. You'll eventually bug iPhones and stuff

https://downloads.avaya.com/css/P8/documents/101059875

 

[jimbojimbo]

While it is easy to use a System Manager Certificate on the external interface of the SBC, tt is not something I necessarily want in production. Just be very cognizant of the SAN requirements and make sure you have all the various applications covered (typically have around 5 SANS).

 

[kyle555]

https://www.thesslstore.com/blog/go...pple-safari-in-one-year-certificate-validity/