Avaya server uses two types of security certificates, a Root or a Certificate Authority (CA) certificate and a server certificate.
A Root or CA certificate establishes Avaya as a trusted CA. If you plan to use this computer and browser to access this or other Avaya servers again, you must install a root certificate after you log in. Your browser authenticates the Avaya server certificate with the root certificate installed in your computer system.
A server certificate verifies the identity of a server. The server certificate changes every time the server is reconfigured. If the name of the server is changed, the next time you log in, you might get a security alert.
The Avaya server relies on two server certificates. One server certificate is the default certificate used by service technicians, who must log in to many servers to perform tasks. The default certificate is issued to the services Ethernet interface address such as192.11.13.6 and identifies the certificate authority as the SIP Product Certificate Authority.
The second server certificate is issued to a site-specific Avaya server such as, SIP-TLS and HTTPS. After this server certificate is configured, its name is unique to that server of the particular site.