|
From Communication Manager Release 7.1, the Communication Manager server no longer supports the use of the default server identity certificate, which is signed by Avaya Product Root CA, and is automatically loaded into the Communication Manager application Identity Certificate stores by Authentication File Server at the time of installation.
Starting with Communication Manager Release 7.1, you must import identity certificates for the Web Services application and the Communication User Services application.
To create Communication Manager Identity Certificates, do one of the following:
Import certificates that are created and signed by a third party host. For example, Verisign.
Create and sign the Identity Certificate for Communication Manager by using the Trust Management PKI feature of Avaya Aura® System Manager.
Generate a Certificate Signing Request (CSR) by using the Communication Manager SMI interface. Send the CSR to a signing authority.
In each of the options, the Communication Manager SMI interface directs the download of the Identity Certificate to store into one or more of the Communication Manager application trust stores. These application trust certificates are exchanged during the TLS client or server handshake to securely confirm the identity of the Communication Manager application.