Identity Certificates on 96xx Phones

[bankingguy]

Hi,

Anyone implemented this? How do we create identity CA for Avaya IP Phones and load it? Appreciate your comment.

 

[wpetilli]

We are using our own internal PKI to provide the phones the certificates. The phone gets the information it needs to get the certificate from the 46xx.settings file.

 

[bankingguy]

how do you create the csr file? got any sample of the csr? Can share what are the lines in 46xx settings I need to change to apply? any sample?

 

[kyle555]

You either provide the phone a PKCS12 with the cert/key or the phone requests via SCEP. No manual CSR procedure.

 

[jimbojimbo]

Unless you are just doing one or two phones I would suggest you use SCEP. If using Microsoft CA you will need NDES and will need to configure it to use a single password.

If you want to use PKCS12 files the 46xxsettings.txt file can point the phone at a file with a matching ID which if memory serves me is the variable $MACADDR to use the phone MAC address to identify the certificate file to use.

 

[bankingguy]

Hi Jimbojimbo, never done this before. Got some notes? i can do pkcs12 but how am i going to create a csr file?