TLS server profile checklist for media tunneling interfaces

Last Updated : May 16, 2019 |

Perform the following tasks to create a TLS server profile required for SIP communications with Avaya SBC.

No.

Task

Notes

1

Create a certificate signing request.

See Certificate setup.

Use the following options:
  • For Common Name, use the HTTP media tunneling FQDN. For example: media.company.com.

  • For Subject Alternative Name, use the HTTPS media tunneling. For example: DNS:media.company.com.

2

Download and save the created .KEY and .CSR files.

3

Send the .CSR file to a public CA for signing.

4

Install the signed certificate and the key on the Avaya SBC.

See Installing a certificate and a key.

When installing the certificate, use a descriptive name. For example: mediaCert.

5

Create a TLS server profile using the installed certificate.

See Creating a TLS server profile.

When creating a profile, use the certificate installed on Avaya SBC in the previous step.

Provide a descriptive name for the profile. For example: mediaTlsProfile.