
Figure 26: Example of the provisioning file, system.prv
SCEP
Simple Certificate Enrollment Protocol (SCEP) is a process used to obtain a certificate. This
process occurs between the IP Deskphone that requires a certificate and a trusted CA that is
responsible for providing certificates.
Figure 27: SCEP Client-Server interaction
The IP Deskphone can require several device certificates. You can request an individual device
certificate for each application, or you can request a device certificate to be shared among
applications.
The following describes the enrollment process for the IP Deskphone for which a device
certificate profile is properly configured for SCEP. The following process is executed by the IP
Deskphone for every active Device Certificate Profile (DCP) on the IP Deskphone that is
configured for SCEP.
1. After the IP Deskphone starts up, the IP Deskphone automatically generates a
private-public key pair for each Device Certificate Profile configured on the IP
Deskphone for SCEP.
2. The IP Deskphone uses the SCEP GetCACert command to retrieve a customer root
certificate from the CA server and prompts the administrator to validate the
SCEP
SIP Software for Avaya 1200 Series IP Deskphones-Administration January 2012 207
Comentarios a estos manuales