DOCSHUB DOCSHUB
  • Library
  • Avaya Support Site Avaya Learning Blogs Videos & Podcasts Knowledge base Report Product bugs
Deutsch English Español (México) Français Français (Canada) Italiano Magyar Nederlands Português (Brasil) Русский עברית العربية 中文(简体) 中文(繁體) 日本語 한국어
Login
DOCSHUB DOCSHUB
  • Library
  • Avaya Support Site Avaya Learning Blogs Videos & Podcasts Knowledge base Report Product bugs
  • Deutsch English Español (México) Français Français (Canada) Italiano Magyar Nederlands Português (Brasil) Русский עברית العربية 中文(简体) 中文(繁體) 日本語 한국어
Login

IP Office Security Guidelines

Table of Contents

Type to filter navigation items by title
  • Notices
  • Overview
    • Introduction
      • Change history
    • Overview
      • Information Classifications and NDA Requirements
      • Applicability
      • Responsibility for IP Office Security
      • Responsibility for Security Updates
    • IP Office Security Fundamentals
      • Encryption
        • Message Authentication
        • Security Database
      • Data Privacy
      • Authentication and Authorization Framework
      • Linux Platform Security
      • IP Office Services
      • Default Security Settings
    • User Accounts and Rights of Access
      • Changing Administrative User and Rights Groups
      • Default Administrative Users and Rights Groups
        • Default Service Users and Rights Groups
        • Default Rights Groups
      • Security Settings on Upgrade
    • Password and PIN Management
      • Password strength
      • Password and PIN Policy
      • Administrative User Passwords
      • User Passwords and Login Codes
      • Additional information
  • Certificates
    • Certificates
      • Certificates and Trust
      • Certificate Terminology
      • Certificate Components
      • Certificate Security
      • Certificate Checks
      • Certificates and Transport Layer Security (TLS)
      • Certificate File Naming and File Formats
    • IP Office Certificate Support
      • IP Office use of certificates
      • IP Office Certificate restrictions
      • Interface Certificate Support
      • Certificate Name Content
      • Certificate Check Controls
    • Certificate Distribution
      • Identity Certificate Distribution
        • Manual ID Certificate Distribution from an External CA
        • Manual ID Certificate Distribution from the Primary or Linux Application Server
        • ID Certificate Distribution using Simple Certificate Enrollment Protocol (SCEP)
        • ID Certificate Distribution Using a PKCS#10 CSR
      • Root CA Certificate Distribution
      • Intermediate CA Certificate Distribution
    • Initial Certificate Settings
      • IP500 V2 Initial Certificate Settings
      • Linux-based IP Office server pre-ignition certificate
      • Server Edition Primary/Application Server Initial Certificate Settings
      • Server Edition Secondary/Linux Expansion Initial Certificate Settings
    • Determining Trust Policy
      • Certificate Trust Policy Considerations
      • Branch System Certification
      • Approach 1: PKI Trust Domain based on Primary or Linux Application Server root CA
      • Approach 2: PKI Trust domain based on Primary or Linux Application Server Intermediate CA
      • Approach 3: PKI Trust Domain Based on an External Certificate Authority
      • Approach 4: PKI Trust Domain Based on an External Certificate Authority via SCEP
      • Approach 5: No Trust Domain
      • Selecting IP Office PKI
    • Implementing IP Office PKI
      • Approach 1: PKI Trust Domain based on Primary or Linux Application Server root CA
      • Approach 2: PKI Trust Domain based on Primary or Linux Application Server Intermediate CA
      • Approach 3: PKI Trust Domain based on an External Certificate Authority
      • Approach 4: PKI Trust Domain based on an External Certificate Authority via SCEP
    • Certificate from External Certificate Authorities
      • Selecting a Certificate Authority
      • Obtaining Identity Certificates
    • Certificate Maintenance
      • Renewing an IP500 V2/Linux Secondary Certificate
      • Renewing a Primary/Application Server ID Certificate
      • Renewing a Primary/Application Server CA Certificate
      • Recovering a Certificate
      • Certificate Troubleshooting
  • VoIP Security
    • VoIP Security
      • IP Office Platform Media Security
      • VoIP Signaling Security
      • Endpoint Provisioning Security
      • SRTP Performance & Capacity
      • Secure Call Indications
      • Session Border Controllers & IP Office
      • VoIP Security Planning Considerations
  • Securing
    • Securing the IP Office Platform Solution
      • General Guidelines
      • Assessing IP Office Security Requirements
      • Security Administration
      • Change Security Details
      • Remove Unnecessary Accounts
      • Disable Unused Services/Interfaces
      • Ensure Minimum Rights of Access
      • Enforce a Password Policy
      • Update Certificates
      • Securing Telephony Users & Extensions
      • Hardening for Remote Workers
      • Securing Trunks/Lines
      • Securing Voice Media
      • Securing CTI Interfaces
      • Configuration and Other Sensitive Data
      • Secure Maintenance Interfaces
      • Restricting Physical Access
      • Securing Server Edition Servers
      • Securing Linux Application Server
    • Preventing Unwanted Calls
      • Call Barring
      • User Based Barring
      • Protecting Phones
      • Making Calls from Protected Phones
      • Forwarding Protection
      • Remote Forwarding Controls
      • SMDR Reporting of Barred Calls
      • Error Handling in Voicemail Pro Call Flows
    • Securing IP Office Applications
      • Securing IP Office Manager
      • Securing IP Office Web Manager/Web Control
      • Securing Web Licence Manager
      • Securing System Status Application
      • Securing SysMonitor
      • Securing Voicemail Pro
      • Securing Embedded Voicemail
      • Securing Avaya one-X Portal for IP Office
      • Securing WebRTC Gateway
      • Securing Media Manager
      • Securing Avaya Contact Center Applications
    • Limiting IP Network Exposure
      • Firewalls
      • Session Border Controller
      • Remote Maintenance Access
  • Monitoring
    • Monitoring the IP Office Platform
      • Checks and Tests
      • IP Office Reporting
      • Voicemail Pro Reporting
      • Avaya one-X Portal for IP Office Reporting
      • Linux-Based Server Reporting
      • Other Components Reporting
      • Avaya Security Advisories and IP Office Updates
      • Response to Incidents
  • Appendices
    • Avaya Product Security Support
      • Accessing Avaya Security Advisories
      • Interpreting an Avaya Security Advisory
    • Default Trusted Certificates
      • Default Trusted Certificates
      • Symantec Class 3 Secure Server CA - G4 in PEM format
      • Entrust Certification Authority - L1K in PEM format
      • GTS Root R1 in PEM format
      • GTS Root R2 in PEM format
      • GlobalSign Root CA - R2 in PEM format
      • ISRG Root X1 in PEM format
      • DigiCert Global Root CA in PEM format
      • DigiCert SHA2 Secure Server CA in PEM format
      • Let's Encrypt Authority X3 in PEM format
      • Removing a Default Trusted Certificate
    • Windows Certificate Management
      • Windows Certificate Store Organization
      • Certificate Store Import
      • Certificate Store Export
      • Certificates Console
    • SRTP Troubleshooting
      • Troubleshooting Tools
      • Troubleshooting Tips
    • IP Office Interface Certificate Support
      • IP Office Interface Certificate Support: IP Office
      • IP Office Interface Certificate Support: Voicemail Pro
      • IP Office Interface Certificate Support: Avaya one-X Portal for IP Office
      • IP Office Interface Certificate Support: Linux Server
      • IP Office Interface Certificate Support: WebLM Server
    • IP Office VoIP Endpoint Security
      • Avaya SIP Endpoint Security Options
      • IP Office SIP Endpoint Certificate Operation
      • Avaya H.323 Endpoint Security Options
      • Avaya H.323 Endpoint Certificate Operation
    • Using the IP Office Certificate Authority
      • Generating the CA Server's Own Identity Certificate
      • Generating Identity Certificates for Other Devices
      • Exporting the Signing Certificate
      • Renewing/Replacing the Signing Certificate
    • Secure Provisioning of 9600 Series H.323 Phones
      • Manual Staging Process
      • Automated Process
      • Changing an IP Office Root CA Certificate
    • Application/Client Security Dependencies
    • Supported Ciphers
  • Certificate Signing Requests
    • Certificate Signing Requests
      • Converting Certificate Files
    • Creating a CSR using Microsoft MMC Certificates Snap-in
      • Create the CSR (MMC)
      • Download and Import the Signed Identity Certificate (MMC)
      • Export the Signed Identity Certificate (MMC)
    • Creating a CSR using the OpenSSL Package
      • Create the CSR (OpenSSL)
      • Download and Combine the Signed Identity Certificate (OpenSSL)
    • Creating a CSR using the Linux Server Command Line
      • Create the CSR (Linux CLI)
      • Download and Combine the Signed Identity Certificate (Linux CLI)
  • Further Help
    • Additional Help and Documentation
      • Additional Manuals and User Guides
      • Getting Help
      • Finding an Avaya Business Partner
      • Additional IP Office resources
      • Training
Home
IP Office Security Guidelines
Certificate Distribution
Identity Certificate Distribution

Identity Certificate Distribution

Share this page

  • On LinkedIn
  • On X
  • On Email

PDF Export Options

  • This Topic
  • Entire Document
Last Updated : Apr 20, 2022 |
Avaya IP Office
Administering
Administrator
Expert

The following methods can be used for identity certificate distribution.

Related information
Certificate Distribution
Manual ID Certificate Distribution from an External CA
Manual ID Certificate Distribution from the Primary or Linux Application Server
ID Certificate Distribution using Simple Certificate Enrollment Protocol (SCEP)
ID Certificate Distribution Using a PKCS#10 CSR
Send Feedback

Topic navigation

Previous Topic

Certificate Distribution

Next Topic

Manual ID Certificate Distribution from an External CA

In this article

STAY CONNECTED

Twitter Youtube Linkedin
Footer Icon
  • Sitemap
  • Terms of use
  • Privacy
  • Cookie Policy
  • Trademarks
  • Accessibility
© 2026 Avaya LLC