Removal of default certificates

Last Updated : Jun 10, 2026 |

Avaya SIP CA issued certificates are no longer supported for new installations. Default certificates, also known as demo certificates, are non-unique identity certificates that were automatically installed on newly shipped Session Manager servers. Default certificates are not secure and do not meet current NIST standards.

New Session Manager servers no longer use the Avaya SIP Product CA issued Default Certificates. New customer networks can request an Identity Certificate from the System Manager Trust Management that is signed by the System Manager Certificate Authority.

For upgrades, Session Manager preserves the previous certificate. If a demo certificate was in use in the previous release, the certificate is preserved through the upgrade.

Avaya recommends that customers use the newer certificates as soon as possible.