Identifying the root CA certificate installed in Avaya Aura Messaging and installing it in Usage Metering Collector

Last Updated : Dec 07, 2020 |

About this task

For any recent updates on certificate management in Avaya Aura® Messaging, see the Administering Avaya Aura® Messaging guide.

Procedure

  1. Log on to the Avaya Aura® Messaging - System Management Interface.
  2. On the Administration menu, click Server (Maintenance).
  3. Do the following to view the CA and Common Name (CN) of the Avaya Aura® Messaging server:
    1. In the left navigation pane, click Security > Server/Application Certificates.

      The system displays the list of installed server and application certificates.

    2. Identify the Avaya Aura® Messaging server identity certificate installed in the Messaging repository.

      The Messaging repository is represented by the letter M under Installed In.

    3. Note down the CA, displayed under Issued By, that signed this identity certificate.
    4. Note down the Avaya Aura® Messaging server CN displayed under Issued To.
  4. Do the following to copy the root certificate of the CA you identified in Step 3:
    1. In the left navigation pane, click Security > Trusted Certificates.

      The system displays the list of installed trusted certificates.

    2. Select the root certificate of the CA that you identified in Step 3.

      Ensure that you select the root certificate that is installed in the Messaging repository of the Avaya Aura® Messaging server.

    3. Click Display to view the certificate.
    4. Copy the certificate text from BEGIN CERTIFICATE through END CERTIFICATE.
  5. Install the copied certificate in the Usage Metering Collector by using the from text option.

    For more information, see Installing an outbound certificate.

  6. Ensure that the DNS server has an Avaya Aura® Messaging server FQDN to IP address mapping entry.

    If the DNS server does not contain the mapping, add a mapping entry in the following format to the /etc/hosts file located on the Usage Metering Collector server:

    <IP address of Avaya Aura® Messaging server> <FQDN of the Avaya Aura® Messaging server>

    For example, 10.100.10.100 aam.pu.ava.com

    Ensure that the Avaya Aura® Messaging server FQDN mentioned in the DNS server or /etc/hosts file matches the CN present in the Avaya Aura® Messaging server identity certificate that you noted in Step 3.