User`s guide

Administrator’s Guide for Polycom HDX Systems
8–16 Polycom, Inc.
To add a certificate on the Certificates screen:
1 Click Browse to search for and select a certificate.
2 Click Add.
The system checks the certificate data and adds it to the list. If you don't
see the certificate in the list, the system was unable to recognize the
certificate. This process is sometimes referred to as installing a certificate.
You can select a certificate in the list to view its contents. You can also remove
a certificate from the list by clicking Remove.
When you add a CA certificate to the HDX system, the certificate becomes
trusted for the purpose of validating peer certificates.
Using Certificate Signing Requests (CSRs)
The HDX system allows you to install one client and one server certificate for
identification of the HDX system to network peers. Whether you need these
client-type or server-type identity certificates depends on which HDX features
and services you intend to use, and whether your network environment
supports certificate-based authentication for those services.
For example, if your HDX system is configured to use the following features,
you might need to create a client-type CSR and add the resulting certificate
approved by the CA:
• Provisioning
• CMA or RealPresence Resource Manager System Monitoring
Always Validate Peer
Certificates from Servers
Enables certificate validation by specifying
whether the HDX system requires the server
to present a valid certificate when the server
makes secure connections for services such
as provisioning, directory search, and session
initiation protocol (SIP) calling. For some
security profiles, this setting is always
enabled.
Always Validate Peer
Certificates from Browsers
Enables certificate validation by specifying
whether the HDX system requires a browser
to present a valid certificate when it tries to
connect to the HDX web interface. For some
security profiles, this setting is always
enabled.
Setting Description
If you do not add the certificates for the HDX system before using the HDX web
interface, you might receive error messages from your browser stating that the
security certificate for the web site “Polycom” cannot be verified.