Creating and installing the identity certificate used by Avaya Session Border Controller for Enterprise

Last Updated : Jan 15, 2020 |
Prolog information
Metadata
Keywords:
  1. Log in to the Avaya Session Border Controller for Enterprise server as the administrator.
  2. Click TLS ManagementCertificates.
  3. Click Generate CSR, and enter the following details:
    1. The certificate Common Name field should be set to the FQDN of the Avaya Session Border Controller for Enterprise.
    2. The certificate Subject Alt Name fields should have the following included: DNS:<FQDN-of-Avaya Session Border Controller for Enterprise>, IPAddress:<IP Address of the external interface>, IPAddress:<IP Address of the internal interface>.
    3. Client and Server authentication enabled.
    4. Key usage set to
    5. Set and confirm the passphrase.
    6. Enter other details as required.
  4. Download the CSR and private key file and use your Certificate Authority (CA) to sign the request and generate the identity certificate.
    ADDITIONAL INFORMATION:
    For example, the System Manager CA can be used to achieve this.
  5. In TLS Management; Certificates, click Install to import the Avaya Session Border Controller for Enterprise identity certificate and private key file.
  6. The CA certificate used to sign the CSR and identity certificate must be loaded into each server that will receive client connections from the Avaya Session Border Controller for Enterprise. This allows those servers (that is, Microsoft Edge and Session Manager) to authenticate incoming TLS client connections from the Avaya Session Border Controller for Enterprise.
  7. For Standalone Avaya Session Border Controller for Enterprise, after installing the certificate, the following CLI command must be executed to sync the private key with the certificate:
    1. Log in to the Avaya Session Border Controller for Enterprise through SSH using a tool like putty.
    2. Change to the directory: /usr/local/ipcs/cert/key.
    3. Execute the command: enc_key <private-key-file-name> <passphrase> .
      # cd /usr/local/ipcs/cert/key
      # enc_sbc.bvw.avaya.key avaya123
  8. Using System Management, select Restart Application to restart the Avaya Session Border Controller for Enterprise.