Polycom 3725-76302-001O manual Der

System Security

	Protocol /
Encoding	File Type	Description and Installation Method
PEM (Base64-encoded	PKCS #7 protocol	Certificate chain containing:
ASCII text)	P7B file	• A signed certificate for the system, authenticating its
			public key.
		• The CA’s public certificate.
		•	Sometimes intermediate certificates.
		Upload file or paste into text box.
	CER (single certificate)	Signed certificate for the system, authenticating its
	file	public key.
		Upload file or paste into text box.
	Certificate text	Encoded certificate text copied from CA’s email or
		secure web page.
		Paste into text box.
DER	PKCS #12 protocol	Certificate chain containing:
(binary format using ASN.1	PFX file	• A signed certificate for the system, authenticating its
Distinguished Encoding			public key.
Rules)		• A private key for the system.
		• The CA’s public certificate.
		Upload file.
	PKCS #7 protocol	Certificate chain containing:
	P7B file	• A signed certificate for the system, authenticating its
			public key.
		• The CA’s public certificate.
		•	Sometimes intermediate certificates.
		Upload file.
	CER (single certificate)	Signed certificate for the system, authenticating its
	file	public key.
		Upload file.

How Certificates Are Used by the Polycom RealPresence DMA System

The Polycom RealPresence DMA system uses X.509 certificates in the following ways:

1When a user logs into the Polycom RealPresence DMA system’s browser-based management interface, the Polycom RealPresence DMA system (server) offers an X.509 certificate to identify itself to the browser (client).

The Polycom RealPresence DMA system’s certificate must have been signed by a certificate authority (see Certificate Procedures on page 46).

The browser must be configured to trust that certificate authority (beyond the scope of this documentation).

If trust can’t be established, most browsers allow connection anyway, but display a ‘nag’ dialog to the user, requesting permission.

Polycom, Inc. 40