System information

ManualsBrandsBoots ManualsGadgetsCS-1000

391

392

393

394

395

396

397

398

399

400

Network features 393

You must verify the fingerprint is correct and either select Accept or

Reject based on the verification. A 5-minute timeout occurs so you can

perform the verification, after which the screen disappears. The file rejects

if you take no action.

Manual B

Manual B uses a 20 digit fingerprint.

If the file containing a service provider certificate is not signed you must

enter a fingerprint for the file as a whole, regardless of the number of

certificates contained in the file. If you enter the correct fingerprint, all

certificates in the file validate and save. This is more secure than Manual

A as the tendency would be to automatically accept the prompted value.

In Manual B mode, the description of the file presents and you are

prompted to enter the fingerprint you receive for example, by email.

If you select Install the file type, a prompt to enter the fingerprint and a

cursor appears on the screen. See Figure 72 "Fingerprint value screen"

(page 392).

Enter the fingerprint and select Accept. If the fingerprint is correct, the

certificate saves and the IP Phone continues with its operation. If the

fingerprint is incorrect an error message displays for a few seconds and

you are prompted again to re-enter the fingerprint.

See Figure 72 "Fingerprint value screen" (page 392).

After 3 consecutive errors, the certificate rejects and the IP Phone

continues its operations. A 30-second timeout occurs after which the

screen disappears and the certificate rejects.

A file is signed by appending a digital signature, which is created using

a Signing Certificate. The Signing Certificate must either be directly

issued by a CA root certificate installed on the phone or there must be a

certificate chain that can be followed, which ends with a CA root certificate

installed on the phone. In either case, there must be a trust anchor on the

phone, which can verify the authenticity of the Signing Certificate.

Certificate requirements

The file signing certificate requires the following minimum attributes

• Version—3

• Key Usage—Digital signature

Nortel Communication Server 1000

IP Phones Fundamentals

NN43001-368 05.02 26 May 2009