IP500 V2 Initial Certificate Settings

Last Updated : Jul 24, 2024 |
Prolog information
Metadata
Keywords:
An IP500 V2 creates a unique self-signed CA certificate at initial start-up and when the security settings are defaulted. The initial certificate contains the fields listed below.
  • You can use this certificate for limited PKI operations. Whilst it has some security value, it is not part of a wider PKI and so will not be trusted by anything else unless this certificate is installed in their trusted certificate store.
Certificate Field
Contents
Notes
Version
V3
X.509 V3 format.
Signature Algorithm
sha256RSA
–
Serial Number
Large random number
A unique serial number of up to 20 bytes.
Issuer
CN = ipoffice-<nnnnnnnnnn>.avaya.com
O = Avaya Inc
OU = GCS
L = Basking Ridge
S = New Jersey
C = US
E = support@avaya.com
Where <nnnnnnnnnn> is the LAN1 MAC address of the IP Office control unit. For example: ipoffice-00e00705918e.avaya.com
Subject
See above.
The same as the Subject.
Issued By
ipoffice-<nnnnnnnnnn>.avaya.com
Where <nnnnnnnnnn> is the LAN1 MAC address of the IP Office control unit. For example: ipoffice-00e00705918e.avaya.com
Issued To
ipoffice-<nnnnnnnnnn>.avaya.com
Where <nnnnnnnnnn> is the LAN1 MAC address of the IP Office control unit. For example: ipoffice-00e00705918e.avaya.com
Valid From
DD/MM/YY HH:MM:SS
Matches the UTC certificate creation time/date minus 24 hours.
If the real time clock was corrupt/not set, the time will be fixed to 00:00:00 1st January of the year the software was released.
Valid To
Valid From plus 825 days
–
Subject Alternative Name(s)
DNS:ipoffice-nnnnnnnnnn.avaya.com
IP:a.b.c.d
IP:e.f.g.h
Where:
  • nnnnnnnnnn is the LAN 1 mac address
  • a.b.c.d is the LAN 1 IP address at the time of certificate creation
  • e.f.g.h is the LAN 2 IP address at the time of certificate creation
Enhanced Key Usage
Server Authentication
Client Authentication
Marked as non-critical. The certificate can be used for the set of IP Office certificate operations.
Basic Constraints
cA: true
pathLenConstraint: 0
Marked as critical. The certificate can be used in isolation as a CA, no other certificates may be signed by this one.
Key Usage
keyAgreement
keyEncipherment
digitalSignature, 
nonRepudiation, 
dataEncipherment
keyCertSign
Marked as non-critical. The operations for which the certificate can be used.
Subject Key Identifier
Signature data
–
Public Key Algorithm
RSA
–
Public Key
Size 2048 bits
–
Related links
Initial Certificate Settings