Polycom 1725-31424-001 manual Configure Certificates

Page 32

Deployment Guide for the Polycom CX700 IP Phone

Step 1.3 - Configure Certificates

Two approaches to configure certificates are provided. By default, a Windows 2008 / 2003 Enterprise Certificate Authority (CA) will publish the trusted root certificate chain in Active Directory automatically.

To determine whether you need to run certutil, you can confirm that the certificate chain is present by running ADSIedit.msc to check the Configuration naming context for the following entry under CN=Certification Authorities (you should see your Enterprise CA listed with a Class type of certificationAuthority).

Once you’ve determined that your Enterprise CA is listed, you can confirm that the Trusted Root certificate chain actually uploaded by double-clicking on your Enterprise CA (CN=ContosoCA in the example) and look for the cACertificate attribute. It should be populated because this is the data (basically .CER file) that the Polycom CX700 phone pulls down from Active Directory to populate its Trusted Root Certificate cache in order to trust the pools internally issued certificate (refer to the following figure).

26

Image 32

Contents Deployment Guide for the Polycom CX700 IP Phone Trademark Information About This Guide Deployment Guide for the Polycom CX700 IP Phone Contents Deployment Guide for the Polycom CX700 IP Phone Page Dhcp and the Polycom CX700 IP Phone Dhcp Search OptionsDNS and the Polycom CX700 IP Phone Polycom CX700 Phone QueryingExchange Server 2007 Autodiscover Service NTP Time Provider NTP and the Polycom CX700 IP PhonePolycom CX700 Phone Querying of Exchange Server Server Security Framework Overview Root CA Certificate for the Polycom CX700 Phone Polycom CX700 Phone Certificates Trusted Authorities Cache Vendor Certificate Name Expiry Date Key Length Polycom CX700 Phone on Introduction Assumptions and TerminologyPage Deployment Guide for the Polycom CX700 IP Phone Background \Pool01Data\ClientUpdateStore\DeviceUpdates Page Action Examples / Comments Contoso.com\userAlias instead of just Contoso\userAlias Spnego Polycom CX700 Phone Upgrade Steps Summary Deployment Guide for the Polycom CX700 IP Phone Polycom CX700 Phone Upgrade Steps Details Set Environmental DependenciesConfigure Dhcp DNS Configure Certificates Upload certificate chain Use the Automated Method Page Verify Internal and External Download URLs ?xml version=1.0 ? Response Upgrade Polycom CX700 Phones from 1.0.199.123 to Cab File Deployment Guide for the Polycom CX700 IP Phone Upgrade Polycom CX700 Phones from 1.0.522.101 to Phone will reset and go to the calibration screen Page Deployment Guide for the Polycom CX700 IP Phone Troubleshooting the Polycom CX700 Phone Logs Used for Troubleshooting When to Use Dhcp Option Internal ExternalDeployment Guide Polycom CX700 Configuring Windows Server as an NTP Time Source Net stop w32time && net start w32time Enabling Automatic Certificate Enrollment For Windows Select CN=Configuration,DC=yourDomain,DC=com Deployment Guide Polycom CX700 Confirming the Current Software Version Deployment Guide Polycom CX700