User's Manual

The CRL is always issued by the CA which issues the corresponding certificates. The
certificates for which a CRL should be maintained are often X.509/public key certificates, as
this format is commonly used by PKI schemes.
When CRL is selected from the Certificates Administration menu, the CRL screen displays
a list of all serial numbers in the CRL loaded on the phone.
Figure 55: CRL screen
The following table describes the function of the context-sensitive soft keys for the CRL
screen.
Table 46: Context-sensitive soft keys for the CRL screen
Context-sensitive soft key Action
Back Returns you to the previous screen.
CRL files can be installed on the phone by using the provisioning file in the [CRL] section:
[CRL]
DOWNLOAD_MODE FORCED
VERSION 000002
FILENAME crl.pem
PROMPT YES
Security Policy
The security policy file contains a set of rules or parameters that dictate certificate-based
authentication on the IP Deskphone.
An example of the Security Policy file rules is as follows:
CERT_ADMIN_UI_ENABLE NO
SECURITY_LOG_UI_ENABLE NO
Certificate-based authentication
266 SIP Software for Avaya 1100 Series IP Deskphones-Administration November 2012
Comments? [e-mail]