IP Office Security Guidelines

IP500 V2 Initial Certificate Settings

Last Updated : Jul 24, 2024 |

An IP500 V2 creates a unique self-signed CA certificate at initial start-up and when the security settings are defaulted. The initial certificate contains the fields listed below.

You can use this certificate for limited PKI operations. Whilst it has some security value, it is not part of a wider PKI and so will not be trusted by anything else unless this certificate is installed in their trusted certificate store.


Certificate Field	Contents	Notes
Version	`V3`	X.509 V3 format.
Signature Algorithm	`sha256RSA`	–
Serial Number	Large random number	A unique serial number of up to 20 bytes.
Issuer	`CN = ipoffice-<nnnnnnnnnn>.avaya.com O = Avaya Inc OU = GCS L = Basking Ridge S = New Jersey C = US E = support@avaya.com`	Where `<nnnnnnnnnn>` is the LAN1 MAC address of the IP Office control unit. For example: `ipoffice-00e00705918e.avaya.com`
Subject	See above.	The same as the Subject.
Issued By	`ipoffice-<nnnnnnnnnn>.avaya.com`	Where `<nnnnnnnnnn>` is the LAN1 MAC address of the IP Office control unit. For example: `ipoffice-00e00705918e.avaya.com`
Issued To	`ipoffice-<nnnnnnnnnn>.avaya.com`	Where `<nnnnnnnnnn>` is the LAN1 MAC address of the IP Office control unit. For example: `ipoffice-00e00705918e.avaya.com`
Valid From	`DD/MM/YY HH:MM:SS`	Matches the UTC certificate creation time/date minus 24 hours. If the real time clock was corrupt/not set, the time will be fixed to 00:00:00 1st January of the year the software was released.
Valid To	Valid From plus 825 days	–
Subject Alternative Name(s)	`DNS:ipoffice-nnnnnnnnnn.avaya.com` `IP:a.b.c.d` `IP:e.f.g.h`	Where: `nnnnnnnnnn` is the LAN 1 mac address `a.b.c.d` is the LAN 1 IP address at the time of certificate creation `e.f.g.h` is the LAN 2 IP address at the time of certificate creation
Enhanced Key Usage	`Server Authentication Client Authentication`	Marked as non-critical. The certificate can be used for the set of IP Office certificate operations.
Basic Constraints	`cA: true pathLenConstraint: 0`	Marked as critical. The certificate can be used in isolation as a CA, no other certificates may be signed by this one.
Key Usage	`keyAgreement keyEncipherment digitalSignature, nonRepudiation, dataEncipherment keyCertSign`	Marked as non-critical. The operations for which the certificate can be used.
Subject Key Identifier	Signature data	–
Public Key Algorithm	RSA	–
Public Key	Size 2048 bits	–

Send Feedback