Specifications

1-10
Linksys SPA Provisioning Guide
Version 3.01
Chapter 1 Provisioning Linksys VoIP Devices
Using HTTPS
Figure 1-2 SPA Configuration and Provisioning Certificate Chain
As indicated in the lower half of the diagram, a Linksys Client Certificate Root Authority signs each
unique certificate. The corresponding root certificate is made available to service providers for client
authentication purposes.
Sipura Technology, Inc
Client Certificate Root Authority 1
Sipura Technology, Inc
Provisioning Server Root Authority 1
SPA
Signs SPA
Client Certificates
VoIP Service Provider
Provisioning Server Entity
Signs Provisioning
Server Certificates
PKEY CERT
PKEYCERT
CERTPKEY
CERT PKEY
SPA Firmware Load
Root CA
Certificate List
Compiled into
SPA Firmware
HTTPS Server Configuration Files
Root CA
Certificate List
Stored on Service Provider’s
Provisioning Server
Authenticates Server
in HTTPS Connection
Authenticates Client
in HTTPS Connection
SPA Provisioning Server
SPA Configuration-Provisioning Certificate Chain