SHA2 on Avaya J-Series Phones

[bankingguy]

Anyone implemented this?

We are using our internal certificate server and wanted to move IP Phones from SHA1 to SHA2. CM/SM/SMGR 8.1 full SIP environment.

 

[avayaguy23]

what is your question? My first thought is to stand up new http servers and try migrating it one subnet at a time.

 

[wpetilli]

I've done it with our team here. We use SCEP to get the identity cert of the phone. We use the 46xx file to point it. I can send you the actual lines in the file. If your setup is the same. In the root directory with the firmware, we add in our root and subca certs.

 

[bankingguy]

Hi,

thanks for your response.

I have never done any SHA2 so logically the process to take the certificate to get it to use pfx/p12 seems to be confusing. what parameter do i put the key file password or it to merge all certs - the signed ca, root, intermediate and key file to create the pfx/p12 file

Do i require a staging server of some sort?

 

[bankingguy]

Thanks for the reply @wpetilli

yes please. from our SCEP server i can see that it is being signed, but when it starts installing that CA it fails. I believe im missing the password but no idea where to put.

Can share me the actual lines to edit?