Checklist for creation of a TLS server profile for a management interface

Last Updated : Oct 09, 2018 |

Perform the tasks in this checklist to configure certificates and create a TLS server profile for a management interface. This is required for external client access configuration.

No.

Task

Notes

1

Create a certificate signing request.

See Creating a certificate signing request on Avaya Session Border Controller.

When creating a CSR, use the following options:

  • For Common Name, use the management interface FQDN. For example: asbce_management.company.com.

  • For Subject Alternative Name, provide both the FQDN and IP address of the management interface. For example: 
    DNS:asbce_management.company.com
IP:10.10.10.10
    .

2

Download and save created .KEY and .CSR files.

3

Send the .CSR file to the System Manager CA for signing.

See Signing certificates with the System Manager CA.

4

Install the signed certificate and the key on the Avaya SBC.

See Installing a certificate and a key.

When installing the certificate, use a descriptive name. For example: asbceManagementCert.

5

Create a TLS server profile using the installed certificate.

See Creating a TLS server profile.

When creating a profile, use the certificate installed on the Avaya SBC in the previous step.

Provide a descriptive name for the profile. For example: asbceManagementTlsProfile.
Related information
External client access configuration checklist