IPO Security Certificate R11.1 FP1 SP 1 3

[tac84]

Hey all,

Is it just me or can't you export your IPO security certificate anymore from web manager?

Thanks, Tim
Adelaide, Australia

 

[tac84]

Just thought I'd try one last time to see if anyone knows how to export the IP Office security certificate to install it in the trusted store in Windows.



Thanks, Tim
Adelaide, Australia

 

[gknight1]

I just upgraded a system to this version as well to implement workplace for cell phones. i thought I was going crazy, but everything I was reading was I needed to export the cert from the IPO. I only see "Set", "View", and "Regenerate

 

[tac84]

Same - Maybe it's a bug with this version?

Thanks, Tim
Adelaide, Australia

 

[tac84]

I've opened up a ticket.

Thanks, Tim
Adelaide, Australia

 

[Travis Harper]

Try in platform view. That is where I export mine from.

Platform View -> Settings/General -> Certificates.

 

[gknight1]

interestingly enough, my platform view won't load. i get a check web control service error. when i ssh into the UCM i check the webcontrol service and it shows running. I've rebooted and everything, still no platform view.

any update from avaya tac84?

 

[tac84]

Avaya's response: "Could you please descript your request with detailed information and issue background?"

Despite a very detailed reply....

I've provided them with more information.

@Travis when you say Platform view, are you referring to Server Edition?

Thanks, Tim
Adelaide, Australia

 

[IPGuru]

cany you use View & then copy & paste it to a suitable document (not tried just a random thought)


Do things on the cheap & it will cost you dear

 

[tac84]

@IPGuru - negative unfortunately. Note I only tried using Web Manager.

Thanks, Tim
Adelaide, Australia

 

[tac84]

Update from Avaya:

They asked me why I want to download my own IP Office Security Certificate....

I don't pay AUD$600+ per year for IPOSS to enter into a series of back and forth riddles with Avaya. Tell me what I want to know! This shouldn't be a State Secret.

Thanks, Tim
Adelaide, Australia

 

[gknight1]

tac84, you ever get anywhere with this?

I'd like to get the cert to get the avaya workplace mobile app working, but so far, its a no go.

 

[tac84]

@gknight1 - You would not believe the back and forth with Avaya on this one.....It's like smashing your head against a brick wall. I really don't believe they know their own product.

Will keep you all posted.

TC

Thanks, Tim
Adelaide, Australia

 

[Albus2]

Can you tell us a bit more, please.
Do you have a Server Edition or 500v2 plus possibly the Application Server?
Do you have ASBCE?
Where did you create the certificates? Who is your CA?
Do you want to use it just for Workplace? If so, there is no need to download and install a certificate, as the client will get it from the system based on the 46xxsettings content.
In short: why do you want to download your own IP Office Security Certificate...?

However, you will want it installed in your Admin PC to avoid all troubles when working with WebManager.
All you need is in WebManager, Platform View (port 7071) under Settings, General.
The Root Certificate can be downloaded using the 'Download (DER-encoded)' button.

 

[tac84]

Hi @Albus2
Sorry - I should have been more specific from the beginning. I'm not talking about Server Edition.
I'm running R11.1 on a 500v2. Previously, in web manager, you could export the systems self-generated Certificate as a file and then import it into the Windows Trusted root store.
When I originally posted this, I was running Kaspersky Internet Security which I've now ditched because it made things much more difficult. I wanted to download the self-generated security certificate so Windows "Trusted" the internal IPO Address, which was preventing me accessing web manager. Since uninstalling Kaspersky I can obviously get into web manager again.

I guess I'm still wondering though why all of a sudden since upgrading to R11.1 Feature Pack 1, Service Pack 1, that you can no longer download the self-generated security certificate. A few others have also mentioned the same issue with R11.1 which is why I decided to open the ticket with Avaya. The ticket is going around in circles and they can't seem to understand that you previously could download the self-generated certificate and since R11.1 was released, you no longer can. They want to remote in but I'm in Australia and the time zone difference just isn't working for me.

Hope this clarifies a bit more.

Thanks, Tim
Adelaide, Australia

 

[gknight1]

thank IP Guru.

this is basically what I did...

used manager to go into the security settings, went to the certificates section, selected View in the Identity Certificate, click on Details tab, click copy to file. from this point it actually exports the cert.

 

[Albus2]

Kaspersky - Man-in-the-Middle with Certificates... I hate this crap.

Not sure if we could download the identity cert before, and for what reason. It's only valid for this machine. And if it is wrong or expired, you have to create a new one.
In WebManager, where you have the "Set" "View" and "Regenerate" which is about the Identity Certificate for the 500v2 (or SE). A bit below, you can see all root and intermediate certificates.
By default, one is named "ipoffice-root-[LAN1 MAC-Addr]-avaya.com" for both "issued by" and "issued to". The same name is also seen as "issued by" when you click the "view" button above. This is your root certificate. And it can be downloaded and installed into your browser.

If that does not cover your problem - what exactly do you want to do?

 

[tac84]

Hi @Albus2

This is a screenshot of what I can see in the Certificates page. I don't see the ipoffice-root-[mac]-avaya.com certificate in the list at the bottom?

Thanks, Tim
Adelaide, Australia

 

[BResource]

You can download the cert by typing in

https://192.168.42.1/WebRootCA.pem

Download the file and change the .pem to .crt and install.