Multiple Trust Stores exist on Avaya Breeze® platform. Each Trust Store contains a set of CA certificates that are trusted by a given service. The following table describes them.
Store type |
Purpose |
Protocol |
SECURITY_MODULE_HTTP |
Used for validating client identity certificates on secure HTTP connections from SIP Endpoints (Hardphones, Softphones, etc.). The endpoints use this HTTP connection for PPM protocol. |
HTTPS |
SECURITY_MODULE_SIP |
Used for validating identity certificates for SIP TLS connections between Avaya Breeze® platform and external devices (e.g. Communication Manager, SBC, SIP Endpoints, etc.) |
SIP |
WEBSPHERE |
Used by the WebSphere SIP container for validating the identity certificate of the Security Module This store should only contain the CA certificate that signed the Security Module SIP identity certificate. This store is not used to validate any identity certificate presented by an external TLS connection. |
SIP |
SPIRIT |
Used by the Spirit Agent to validate the identity certificate |
HTTPS |
MGMT_JBOSS |
Used for validating the identity certificates of System Manager for management (RMI/JMX, DRS replication, etc.) |
JMX, RMI, HTTPS |
CLUSTER_DB |
Used for validating the Cluster DB certificates |
DB |
POSTGRES |
Used for validating the POSTGRES DB certificates |
DB |
AUTHORIZATION_SERVICE |
Used for validating the Authorization service certificates |
AS |