User`s guide

Security
Polycom, Inc. 8–19
Configure the HDX system to use the same method that is used by the CA. You
must get CRL data files from the CA.
To add CRLs on the Polycom HDX web interface:
1 Go to Admin Settings > General Settings > Security > Revocation.
2 Configure the following settings on the Revocation screen:
You can also remove a CRL from the list by clicking Remove.
If you use OCSP, you might need to install one or more additional CA certificates on
the HDX system, for validation of the OCSP response messages.
The Polycom HDX system supports HTTP-based OCSP transactions.
Setting Description
Revocation Method Specifies whether to use CRL or OSCP for
revocation.
Allow Incomplete
Revocation Checks
When this field is enabled, specifies whether a
certificate in the chain is verified without a
revocation status check if no corresponding CRL is
installed.
The HDX system assumes that the lack of a CRL
means the certificate is not revoked. If all required
CRLs are installed, the system performs revocation
checks when validating the certificate.
Add a Certificate
Revocation List (CRL)
1 Click Browse to search for and select a CRL.
2 Click Add to add the CRL to the list.