AudioCodes Mediant 3000, User Manual

Page: 109 / 872

Version 6.6 109 Mediant 3000
User's Manual 9. Configuring Certificates

To configure OCSP:
6. Open the General Security Settings page ( Configuration tab > VoIP menu >
Security > General Security Settings ).
Figure 9-4: OCSP Parameters
7. Configure the OCSP parameters as required. For a description of these parameters,
see OCSP Parameters on page
678 .
8. Click Submit .
Notes:
•
The device does not query OCSP for its own certificate.
•
Some PKIs do not support OCSP but generate Certificate Revocation
Lists (CRLs). For such cases, set up an OCSP server such as OCSPD.
9.5 Self-Signed Certificates
The device is shipped with an operational, self-signed server certificate. The subject name
for this default certificate is 'ACL_nnnnnnn', where
nnnnnnn denotes the serial number of
the device. However, this subject name may not be appropriate for production and can be
changed while still using self-signed certificates.

To change the subject name and regenerate the self-signed certificate:
1. Before you begin, ensure the following:
•
You have a unique DNS name for the device (e.g.,
dns_name.corp.customer.com). This name is used to access the device and
should therefore, be listed in the server certificate.
•
No traffic is running on the device. The certificate generation process is disruptive
to traffic and should be executed during maintenance time.
2. Open the Certificates page (see 'Replacing the Device's Certificate' on page 105 ).
3. In the 'Subject Name [CN]' field, enter the fully-qualified DNS name (FQDN) as the
certificate subject, select the desired private key size (in bits), and then click
Generate
self-signed ; after a few seconds, a message appears displaying the new subject
name.
4. Save the configuration with a device reset (see 'Saving Configuration' on page 520 )
for the new certificate to take effect.