IP Office Interface Certificate Support: IP Office

Last Updated : Dec 19, 2022 |
Prolog information
Metadata
Keywords:
The following table provides an overview of certificate support for the IP Office platform IP interfaces.
Link
Protocol
Certificate Support
ID Certificate Offered
Trust Checks
Check Controls
SIP Line
SIP-TLS
✓
Telephony
Both
✓[1]
SM Line
SIP-TLS
✓
Telephony
Both
✓[1]
SIP Extension
SIP-TLS
✓
Telephony
Client
✕
H323 Extension – Signaling
H323-TLS
✓
Management
Client
n/a
H323 Extension – Provisioning
HTTPS
✓
Management
Both
✓[2]
DECT R4 Provisioning
HTTPS
✓
Management
Both
✓[2]
D100 Provisioning
HTTP
–
–
–
n/a
IP Office Line (WebSocket)
HTTPS
✓
Management
Both
✓[3]
IP Office Manager - Security
TLS
✓
Management
Both
✓[4]
IP Office Manager - Configuration
TLS
✓
Management
Both
✓[5]
IP Office SoftConsole
HTTPS
✓
Management
IPO
✓[2]
System Status Application
TLS
✓
Management
IPO
✕
IP Office Web Manager (Single instance management over port 8443)
HTTPS
✓
Management
Both
✓
IP Office Web Manager (Server Edition management over port 7070)
HTTPS
✓
Management
Client
✕
System Directory
Central external directory feature
HTTPS
✓
Management
Both
✓[2]
Avaya one-X® Portal for IP Office CTI
TCP
–
–
–
–
ACCS CTI
TLS
✓
Management
Server
✓[7]
Avaya one-X® Portal for IP Office Directory
HTTPS
✓
Management
Server
✓[2]
Voicemail Pro
HTTPS
✓
Management
Server
✓[2]
SysMonitor
HTTPS
✓
Management
Server
✓[2]
Backup/Restore client
HTTPS
✓
Management
Client
✓[6]

Notes

[n] indicates the grouping for the certificate check controls on the IP Office server component. See Certificate Check Controls for more details.
  1. Manager Security: SystemCertificatesReceived Certificate Checks (Telephony Endpoints). Any setting other than None will request a client certificate
  2. Manager Security: SystemServicesHTTPService Security Level and SystemCertificatesReceived Certificate Checks (Management Interfaces).
  3. Manager Configuration: LineLineSecurity. The HTTP service security level setting is applied first. This allows the general HTTPS server to have cert checks disabled, but still retain check for IP Office lines
  4. Manager Security: SystemServicesSecurity AdministrationService Security Level and SystemCertificatesReceived Certificate Checks (Management Interfaces).
  5. Manager Security: SystemServicesConfigurationService Security Level and SystemCertificatesReceived Certificate Checks (Management Interfaces).
  6. Manager Security: SystemCertificatesReceived Certificate Checks (Management Interfaces). IP Office HTTP clients will check the server certificate against the TCS for a setting of Medium or High.
  7. Manager Security: SystemUnsecured InterfacesTAPI = unchecked. IP Office will check the ACCS server certificate against the TCS as per a setting of Medium.

Definitions

Column
Description
ID Certificate Offered
Type of ID certificate presented:
  • Telephony – Telephony or Management (configurable).
  • Management – Management certificate.
Trust Checks
Support and direction of certificate trust checks:
  • Both – Mutual certificate checks can be enabled.
  • Server – Only the server can check certificates.
  • Client – Only the client can check certificates.
Related links
IP Office Interface Certificate Support