The information in this appendix applies only if you are using encrypted client connections.
This appendix of certificate management describes certificate authentication for TSAPI and CVLAN client connections. Prior to AE Services Release 7.x, only server certificate authentication was available. Beginning with AE Services Release 7.x, client certification authentication is also available.
Additionally, this overview describes how to configure the TSAPI and CVLAN clients for certificate authentication.
A fresh install does not have an Avaya signed default certificate. A self-signed certificate is created during install time to be used as default.
AE Services servers that have upgraded to version 10.2.x, and AE Services servers on version 7.x or older will have the default server certificate, which is signed by the Avaya Product Certificate Authority.
Note:
The TSAPI and CVLAN Linux client, installed on RHEL ES version 6.5 system and later, will be able to establish a secure connection to the CVLAN Service running on AE Services10.2.x server when using certificates with SHA2, for example SHA256 signatures.
