This option allows identity certificates to be obtained direct from an external Certificate Authority using an automated process.
Potential advantages for identity certificates obtained using SCEP:
-
Generated ID certificates are part of a wider trust domain.
-
ID certificate content format compatible with Avaya components.
-
The root CA certificate is (typically) trusted by 3rd parties and therefore does not need to be distributed.
-
The root CA certificate is always trusted by IP Office components and therefore does not need to be distributed.
-
The certificate creation and distribution process is automated, supporting many systems efficiently.
Potential disadvantages include:
-
Compatibility with SECP servers is currently limited to EJBCA – the CA present on Avaya Aura System Manager (SMGR).
-
Public certificate authorities will not issue certificates for private domains or address ranges.
-
Cost - if using a commercial provider.
-
Control of the CA is external.
-
The certificate policy is subject to commercial considerations.
