AudioCodes 405HD, Administrator'S Manual, Page: 150 / 242

400HD Series IP Phones
Administrator's Manual 150 Document #: LTRT-11973
Note:
• If the remote server is configured to authenticate the client and AudioCodes factory-
set certificates are used for authentication, then the AudioCodes Certificate and
AudioCodes Trusted Root CA must be downloaded to the remote server. These
files can be downloaded from the AudioCodes Web site. For more information,
contact your local AudioCodes sales representative.
•
If you use the AudioCodes Redirect server to obtain firmware and configuration
files, then the factory-set certificates are used to authenticate the connection with
this server.
7.1.2 User-Generated Certificates
If an organizational certificate Infrastructure (PKI) is used, you may wish to instead use
certificates provided by your security administrator. You can define up to five additional user-
generated certificates, which can be configured to secure different types of connections and
paired with external Trusted Root CAs. The following remote server connection types can be
configured with user-generated certificates:

802.1x RADIUS server

SIP TLS server

HTTP/S Provisioning server
When user-generated certificates are loaded to the device to authenticate a specific
connection type, then this certificate is used to secure the connection with the assigned
connection type. For example, if you load Certificate A for connecting to an HTTPS
Provisioning server, then whenever there is an attempt by the phone to connect to a
Provisioning server, then the connection is authenticated using Certificate A.
Note:
•
You can load one certificate for each connection type.
•
If you do not load a certificate to support a specific connection type, then the
factory-set certificate is used to authenticate the connection. For example if you
load user-generated certificates to support Automatic Updates (Provisioning server)
and SIP TLS server connections, and there is an attempt by the phone to connect to
a RADIUS server, then this connection is authenticated using the AudioCodes
factory-set installed certificate.
• You can use the AudioCodes Trusted Root CA with a user-generated certificate.
• You can use the same certificate for different server connection types.