Server Edition Secondary/Linux Expansion Initial Certificate Settings

Last Updated : Jul 23, 2024 |
Prolog information
During the ignition process of a Linux-based IP Office server as a secondary or expansion server, the server generates a self-signed identity certificate. This identity certificate has limited value. You must replace it with one generated by the IP Office networks primary server or, if using third-party certificates, one from the same external CA.
Certificate Field
Contents
Notes
Version
V3
X.509 V3 format.
Serial Number
Large random number
A unique serial number of up to 20 bytes.
Signature Algorithm
sha256RSA
Issuer
CN = <HostName>
O = Avaya Inc
OU = GCS
L = Basking Ridge
S = New Jersey
C = US
E = support@avaya.com
Where <HostName> is the hostname configured during ignition.
Subject
See above.
The same as the Issuer.
Issued By
<HostName>
The <HostName> configured during ignition.
Issued To
<HostName>
The <HostName> configured during ignition.
Valid From
DD/MM/YY HH:MM:SS
Matches the server ignition UTC date and time minus 24- hours.
  • Note: If the servers real-time clock was corrupt/not set, the time is fixed as 00:00:00 1st January of the year the software release.
Valid To
Approximately 2-years from the Valid From date and time.
Subject Alternative Name(s)
None
Enhanced Key Usage
None
Basic Constraints
Subject Type=End Entity
Path Length Constraint = None
Key Usage
None
Subject Key Identifier
Signature data
Public Key Algorithm
RSA
Public Key
Size 2048 bits