Adding System Manager’s Root Certificate to 96xx Phones

Last Updated : Apr 20, 2016 |
This procedure describes how to make phones trust the System Manager CA certificate.
Prolog information
Metadata
Keywords:
Important:
To avoid a service outage, perform this procedure before switching Session Manager to certificates issued by System Manager.
  1. Copy the file to the file server that the 96xx phones are using.
  2. On the file server, edit the file 46xxsettings.txt.
  3. To enforce certificate validation for SIP endpoints, in the file, set tlssrvid as 1.
  4. In the file, set the TRUSTCERTS option to include the System Manager CA certificate.
    For example:
    SET TRUSTCERTS “smgr.txt, av_sipca_pem_2027.txt”
  5. Reboot all phones.
    STEP RESULT:
    After rebooting, the phones download the System Manager root CA and are ready for replacing the SIP identity certificate of the Session Manager.