IP Office Certificate restrictions

Last Updated : Jul 19, 2024 |
Prolog information
Metadata
Keywords:
Currently IP Office certificate support does not include the following:
  • You cannot configure mutual authentication for IP Office Linux-based applications, including Avaya one-X® Portal for IP Office and Voicemail Pro. They cannot check any received certificate against the TCS.
  • SIP clients certificates are not requested.
  • The received certificate tests of IP Office do not include revocation checks such as OCSP or CRLs.
  • No support for DSA or EC-DSA public key certificates, or RSA public keys above 4096 bits. Avaya recommends using RSA public keys of 2048 bits.
    • The IP500 V2 servers does not support the manual generation of a Certificate Signing Request (CSR) where the private key is retained within the server.
    • Use either a web form based request or a third-party tool to create a CSR. See Certificate Signing Requests for more information on how to generate a CSR for IP Office.
Related links
IP Office Certificate Support