User's Manual

The following sections describe the process used to install a device certificate on the IP
Deskphone.
• PKCS#12 is an industry standard for importing and exporting keys and their related
certificates. On the IP Deskphone, this method is only used to import the IP Deskphone
device certificate and private key.
• The [DEV_CERT] section is added to the configuration file 11xxeSIP.cfg to download the
PKCS#12 file device certificate from a provisioning server.
• The administrator is responsible for creating the PKCS#12 file with the required device
certificate associated with the private key of the device certificate.
The PKCS#12 file device certificate must be in Distinguished Encoding Rules (DER) or
BER format. If you are creating the certificate for the first time, you must mark the private
key of the certificate as exportable. If you export a certificate to a PKCS#12 file, you must
enter a password.
Note:
The PKCS#12 password cannot exceed 12 characters in length and must include only
characters that you can enter on the IP Deskphone. These characters include all
numbers, upper and lower case letters, and the following special characters: _ - . ! @
$ % & + : ^.
Installing a device certificate using PKCS12
Use the following procedure to install a device certificate using a PKCS#12 file.
Installing a device certificate using PKCS12
1. Add a [DEV_CERT] section to 11xxeSIP.cfg to enable the IP Deskphone to import
a PKCS#12 file device certificate.
An example of the [DEV_CERT] section is as follows:
[DEV_CERT]
FILENAME “*.p12” # must include “*” symbol to be substituted with MAC
address or it will be rejected.
VERSION <n>
PROFILE 1 # profile index
PURPOSE -1 # bitflag with all purposes it can be used for
# (default is -1 = ALL)
• FILENAME attribute points to the PKCS#12 file device certificate name. The
file name must include the * symbol which is substituted with the IP Deskphone
MAC address to allow the definition of unique filenames for the PKCS#12 files
containing the device certificates for each IP Deskphone. The administrator is
responsible for creating the PKCS#12 file device certificate.
Installing a device certificate using PKCS12
SIP Software for Avaya 1100 Series IP Deskphones-Administration November 2012 255