You can use client identity certificates to provide an identity of the client to the server. Each client has its own unique identity certificate issued by the Certification Authority or Registration Authority. Avaya Workplace Client can get the certificates issued in one of the following ways:
Through Simple Certificate Enrollment Protocol (SCEP) servers, such as Network Device Enrollment Service (NDES) in Active Directory Certificate Services (AD CS).
Avaya Workplace Client for Android and iOS support the SCEP method of installing client identity certificates.
If the SCEP certificate needs a password, you must contact your administrator for the SCEP password.
On Android devices, enter the password on the Identity Certificate screen.
On iOS devices, tap the message to enter the SCEP password.
By manual installation: You provide the necessary certificate file using out-of-band mechanism.
Avaya Workplace Client for Android, Mac, and Windows support the manual method of installing client identity certificates.
By a URL installation: The settings file contains the PKCS12URL location from where you can download the certificate.
Avaya Workplace Client for Android and iOS support the URL method of installing client identity certificates.
If SCEP and PKCS12URL are available, PKCS12URL is used to install the client identity certificate.
The server receives the client certificate through TLS mutual authentication and the certificate is verified. For more information, see Administering Avaya Aura® Session Manager.
