Polycom CMA System Operations Guide

CAUTION

Installing certificates requires a system restart and terminates all active conferences.

When you install a certificate, the change is made to the certificate store immediately, but the system can’t implement the change until it restarts and reads the changed certificate store.

To install a signed certificate that identifies the CMA system

1Go to Admin > Management and Security > Certificate Management and click Install Certificates.

A warning appears stating that changes made to the certificates will require a system restart to take effect.

2In the Add Certificates dialog box, do one of the following:

If you have a PFX, P7B, or single certificate file, click Upload certificate, enter the password (if any) for the file, and browse to the file or enter the path and file name.

If you have PEM-format text, copy the certificate text, click Paste certificate, and paste it into the text box below. You can paste multiple PEM certificates one after the other.

3Click OK.

If you are uploading a signed identity certificate for the first time, it will replace the CMA system self-signed certificate.

4If you are uploading a signed identity certificate for the first time, you can verify that the new signed certificate has replaced the default self-signed certificate:

a In the list of certificates, select the CMA server identity certificate and click View Certificate Details.

b When the Certificate Details dialog box appears, verify that the information in the Issued To and Issued By sections has been replaced by the signed public certificate from the certificate authority.

c Click OK to close the dialog box.

CAUTION

The CMA 6.2 system requires certificates with Client and Server Authentication in the Enhanced Key Usage field, otherwise the certificate installation will fail.

Upload a Certificate Revocation List

This section describes how to install a certificate revocation list (CRL) provided by a certificate authority.

452

Polycom, Inc.

Page 472
Image 472
Polycom 3725-77601-001H manual Upload a Certificate Revocation List