
Active Directory configured for remote access. Other RADIUS or TLS servers can impose
different conditions on the certificate name.
Important:
Before deploying any solution, you must identify what certificate validation criteria is
enforced so that the correct certificate name is requested by the IP Deskphone.
Important:
Some SCEP servers reject all SCEP certificate signing requests that include a Subject
Alternate Name (SAN). The Microsoft Windows 2003 Server version of SCEP is an example
where a certificate request which includes a SAN is always rejected.
During the enrollment process and before the IP Deskphone sends the device certificate
request to the CA server, the IP Deskphone prompts you to enter a challenge password. If the
password feature is disabled in the SCEP server, you do not require a password.
A certificate requested by SCEP is stored in Profile 0 and uses some hard-coded attributes for
requested certificates.
The following table lists additional provisioning file parameters for SCEP support in addition to
UI parameters in the Device settings window.
Table 71: SCEP provisioning parameters
Parameter Purpose Default Allowed
CA SCEP server Empty String
Example:
http://47.11.15.206/certsrv/mscep/mscep-
err.dll
CA_DOMAI
N
Domain
information
used in SCEP
request
Empty String
Example:
IpClients.com
HOST_NA
ME
Host name
information
used in SCEP
request
Empty String
Example:
1234
PKCS 12 download
PKCS#12 is an industry standard for importing and exporting keys and their related certificates.
On the IP Deskphone, this method is only used to import the IP Deskphone device certificate
and private key.
PKCS 12 download
SIP Software for Avaya 1200 Series IP Deskphones-Administration January 2012 209
Comentarios a estos manuales