Unlike enterprise Session Manager or Branch Session Manager, a TLS connection is required before running the initTM command for an edge Branch Session Manager. The initTM command initializes the Avaya Aura® Session Manager Trust Management.

The edge Branch Session Manager is connected to the System Manager at the core through an Application Delivery Controller (ADC) or a reverse proxy.

By default, Entrust certificates are installed for the tunnel as part of the edge Branch Session Manager deployment. A tunnel is an outbound connection from the branch to the core and does not contain any inbound connection. The tunnel supports bidirectional traffic between System Manager at the core and the edge Branch Session Manager to support all management functions, including database replication.

However, if the ADC or reverse proxy uses a certificate authority (CA) other than the Entrust CA to connect to the edge Branch Session Manager, you must install the root CA certificates for the tunnel before configuring the edge Branch Session Manager.

Use certTool to install the certificates for the tunnel.