Server Edition Secondary/Linux Expansion Initial Certificate Settings

Last Updated : Jul 23, 2024 |

During the ignition process of a Linux-based IP Office server as a secondary or expansion server, the server generates a self-signed identity certificate. This identity certificate has limited value. You must replace it with one generated by the IP Office networks primary server or, if using third-party certificates, one from the same external CA.

Certificate Field

Contents

Notes

Version

V3

X.509 V3 format.

Serial Number

Large random number

A unique serial number of up to 20 bytes.

Signature Algorithm

sha256RSA

Issuer

CN = <HostName>
O = Avaya Inc
OU = GCS
L = Basking Ridge
S = New Jersey
C = US
E = support@avaya.com

Where <HostName> is the hostname configured during ignition.

Subject

See above.

The same as the Issuer.

Issued By

<HostName>

The <HostName> configured during ignition.

Issued To

<HostName>

The <HostName> configured during ignition.

Valid From

DD/MM/YY HH:MM:SS

Matches the server ignition UTC date and time minus 24- hours.

  • Note: If the servers real-time clock was corrupt/not set, the time is fixed as 00:00:00 1st January of the year the software release.

Valid To

Approximately 2-years from the Valid From date and time.

Subject Alternative Name(s)

None

Enhanced Key Usage

None

Basic Constraints

Subject Type=End Entity
Path Length Constraint = None

Key Usage

None

Subject Key Identifier

Signature data

Public Key Algorithm

RSA

Public Key

Size 2048 bits