Avaya certificate change management

The table lists how Avaya manages changes to its digital certificates.

Table 1. Changes in the Avaya certificate
Type of change	Description
Renewal	Certificates are never renewed. In the event that a certificate expires or is compromised, a new certificate is issued along with a new license file.
Re-key	Certificates are never re-keyed. In the event that a certificate expires or is compromised, a new certificate is issued along with a new license file.
Modification	Certificates are never modified. In the event that certificate content needs to change, a new certificate is issued along with a new license file.
Revocation	Certificates are revoked if the customer, technical support, or members of the Avaya Security Team believes the certificate has been compromised for any reason. Final decision is left to the Avaya Product Certificate Authority. A certificate is revoked in these circumstances: The information in the certificate is wrong or inaccurate. The subject has failed to comply with the rules in the policy. The system to which the certificate has been issued has been retired or is no longer supported.
Who can request revocation?	Certificate revocations can be requested by: The certificate subscriber The Registration Authority (RA) that has performed the validation of the certificate request Any entity presenting proof of responsibility for a certified Avaya SIP product Any entity presenting proof of the certificate misuse Any entity presenting proof of the private key compromise The final decision on revocation of the certificate is left to the Avaya Product Certificate Authority.
Procedure for revocation request	The Avaya Product Certificate Authority accepts revocation requests by email only: apca@avaya.com The email must be authenticated and must include the serial number and subject name of the certificate in question.
Revocation request grace period	Avaya determines a timeframe for response at the time of the request.