IP Office self-assigned security certificate valid to length

[tac84]

Hi all,
Having lots of issues getting IX Workplace to work on my iPhone.

I'm running R11.1 FP 1 SP 1

The certificate is installed on my iPhone, it's installed in the trusted certificate store too.

I'm reading that with later versions of iOS, you have to reduce the time the self-assigned certificate is valid for, so that it can work when using IX workplace on the iPhone.

I've tried regenerating the certificate on Manager but I'm not sure how to reduce how long it's valid for as it won't give that option?

Any gurus on here that know this problem well and know what I should be doing in the 'Security' part of Manager to get this app working on my iPhone?

Really appreciate any assistance.

Thanks, Tim
Adelaide, Australia

 

[tac84]

Sorry - more information.

I've got it working on my MacBook Pro so the error is ONLY with the iPhone and iOS.

Thanks

Thanks, Tim
Adelaide, Australia

 

[Westi]

I have not found a method to adjust the length.

You could create it via a Windows PC and then upload it. Just would not know how to. I guess Google would be the way to go to find that.

Joe
FHandw, ACSS, ACIS

"Dew knot truss yore Spell Cheque

 

[tac84]

Thanks @Westi

I have a ticket lodged with Avaya re this problem with IX Workplace not working with the self-assigned certificate from IPO. They admit the problem has been around since iOS 13 (We're now at 14.8) and that the only way to get around it is to reduce the default 7 year timeframe the certificate is valid for. Of course, they don't know how to do it...

They currently have my monitor traces, IX Workplace logs and config file trying to work it out.

Amazing that they know the problem exists, continue to push out Releases of R11 and just pretend the problem doesn't exist.

Thanks, Tim
Adelaide, Australia

 

[derfloh]

Use an Application Server to generate the certificate. There you can adjust the lifetime.

IP Office remote service
IP Office certificate check
CLI based call blocking
SCN fallback over PSTN

 

[tac84]

Hi @derfloh great idea but unfortunately I don’t have an application server. I only use IX Workplace as a basic soft phone client so I’m not using it to its full capabilities.

In Windows- I use Avaya Communicator but on my MacBook Pro I have to use IX Workplace, hence why I’m trying to get it working on iOS.

Cheers

Thanks, Tim
Adelaide, Australia

 

[derfloh]

Avaya Communicator will be discontinued.

You can install an Application Server as a virtual machine on your computer.

IP Office remote service
IP Office certificate check
CLI based call blocking
SCN fallback over PSTN

 

[telecomtekperson]

Why not just create a 3rd party SSL Cert?

 

[AACon]

Why not just create a 3rd party SSL Cert?

It's usually due to cost. Some certificates (especially multi-san UCC certs) can be pricey.

-Austin
I used to be an ACE. Now I'm just an Arse.

 

[tac84]

Yep, my IPO is a work from home set up so I didn't want to go to any great cost.

I only have R11.1 Essential Edition with 5 SIP Trunk Licences, IP Phone Licences and 1 Avaya Softphone license which is why I only use Avaya Communicator on Windows and IX Workplace on Mac. If I'm away from home I can VPN into the house and use the softphone. Works great.

This has been a known issue ever since Apple released iOS 13.....Avaya need to catch up.

Thanks, Tim
Adelaide, Australia

 

[telecomtekperson]

You can get a cheap SSL for $50

 

[tac84]

For those playing along at home, the official response from Avaya is that the reason I can't use IX Workplace on my iPhone is because I don't have any Power User licenses. I only have an Avaya Softphone license.

So, I can use Avaya Communicator or IX Workplace on Windows, IX Workplace on my MacBook Pro, but can't use IX workplace on any mobile device.

Thanks, Tim
Adelaide, Australia