Server certificate authentication

Last Updated : Aug 28, 2026 |
Prolog information
Metadata
Keywords:
When the AE Services TSAPI or CVLAN client establishes a secure connection to the AE Services Server, the server sends a certificate to the client that allows the client to verify the server's identity. This process is known as server certificate authentication This process is the same if you use your own certificates or if you use the AE Services default server certificate, or AE Services self-signed certificate. See Figure 1: Server certificate authentication figure for an illustration.
Figure: Server certificate authentication
  1. The client sends a request to the server for a secure session.
  2. The server sends its server certificate to the client.
  3. The client checks the server certificate to determine the following:
    1. If the server certificate is issued by a certificate authority that the client trusts, the client checks the name of the CA.
      To comply, the name of the certification authority (CA) on the certificate must match the name of the CA on the client’s trusted certificate.
    2. If the server certificate is within its validity window.
      The client checks to see if the current time falls between the Not Before and Not After dates in the server certificate.
    3. If the common name in the server certificate matches the name of the server to which the client is connected.
      If the names do not match, the client cannot trust the certificate. This only applies if the client has been configured with Verify Server FQDN=1.
Note:
The server identity certificate must have the following values to establish a secure connection from a TSAPI client to a AE Services server:
  • Key Usage: Digital Signature, Non-repudiation, Key encipherment
  • Extended Key Usage: serverAuth
    Note:
    Extended Key Usage is an optional field, it must have the mentioned value only if it is present in the certificate configuration.
The connection will be dropped if the certificate does not meet the above criteria.
Related links
Certificate management
Location and usage of Avaya-installed certificateLocation of your own certificatesUsage of your own certificate