Device certificate profiles
You can determine the method used to install a device certificate on the IP Deskphone. Each
device certificate installed on the IP Deskphone is attached to a Device Certificate Profile
(DCP). The configuration of the profiles allows you to determine the method used to install a
device certificate and provides you with some control over the device certificate attributes.
You can do the following:
• Specify the method used to obtain a device certificate for the IP Deskphone (SCEP or
PKCS#12).
• Specify the purpose of a device certificate; whether the certificate is used for EAP-TLS,
or HTTPS (for example, allow sharing of device certificates).
• Renew a device certificate obtained by SCEP.
• Customize attributes requested from a SCEP server such as the Distinguished Name
(DN).
The following table defines the profile attributes and the allowed values for a device certificate
profile.
Table 69: Device Certificate Profile Attribute
Name
Type Value(s) Default PKCS#12
Required
Description
Index Int >0 Pre-defined [1-
MAX_PROFILE
S]
✔ Device
Certificate Profile
index.
Version String "" ✔ String containing
version of last
installed PKCS12
file.
Source Int 0 = SCEP 1 =
PKCS12
Index 1 = 0 Index
2+ = 1
✔ SCEP is default
for the first profile.
PKCS12 is
default for the
other profiles.
Active Int 0 = Inactive 1
= Device 2 =
User (future)
Index 1 = 0 Index
2+ = 1
✔ Specifies if the
profile is active
and if the profile is
used for device or
user
authentication.
The value 0
indicates that the
device certificate
Certificate-based authentication
202 SIP Software for Avaya 1200 Series IP Deskphones-Administration January 2012
Comments to this Manuals