Polycom 40/0 Remove a Certificate, Client Certification, Use OCSP to Obtain Revocation Status

System Configuration

Validity		States the issue and expiration dates.
Fingerprints		States SHA1 and MD5 fingerprints (checksums) for confirming certificate.
	When a certificate is about to expire, you are notified ten days prior to the expiration
	date.

Remove a Certificate

You can remove installed certificates.

A certificate cannot be removed when it is the only private certificate which can be used as web service certificate in the system.

To remove a certificate:

1Go to Configuration > Certificate Management.

2Highlight the certificate you want to remove.

3Click Delete.

Client Certification

If client certificate validation is enabled in the system, other systems can connect to the RealPresence Capture Server system only if they present a client certificate issued by a CA that the system trusts.

Enable the client certificate validation only in one of the following situations:

●Your network has implemented a complete PKI (Public Key Infrastructure) system, including a CA server, client software, and the appropriate operational procedures. Client hardware, tokens, and smartcards are optional.

●The CA’s public certificate is installed in the RealPresence Capture Server system so that it trusts the CA.

●All authorized users’ systems, including yours, have a client certificate signed by the CA that authenticates them to the RealPresence Capture Server system.

To enable the client certificate validation:

1Go to Configuration > Certificate Management.

2Tick Enable web client certificate validation.

3Click OK. The system restarts to apply your changes.

Use OCSP to Obtain Revocation Status

You can enable OCSP (Online Certificate Status Protocol) to obtain the revocation status of a certificate presented to the system.

If the certificate includes an AIA extension, the system has the information needed to configure OCSP for obtaining revocation status.

Polycom, Inc. 37