AudioCodes Mediant 3000, User Manual

Page: 110 / 872

User's Manual 110 Document #: LTRT-89729
Mediant 3000
9.6 TLS Server Certificate Expiry Check
The device can periodically check the validation date of the installed TLS server certificate.
This periodic check interval is user-defined. In addition, within a user-defined number of
days before the installed TLS server certificate expires, the device can be configured to
send the SNMP trap, acCertificateExpiryNotifiaction to notify of the impending certificate
expiration.

To configure TLS certificate expiry checks and notification:
1. Open the Certificates page (see 'Replacing the Device's Certificate' on page 105 ).
2. In the 'TLS Expiry Check Start' field, enter the number of days before the installed TLS
server certificate is to expire at which the device must send a trap to notify of this.
Figure 9-5: TLS Expiry Settings Group
3. In the 'TLS Expiry Check Period' field, enter the periodical interval (in days) for
checking the TLS server certificate expiry date. By default, the device checks the
certificate every 7 days.
4. Click the Submit TLS Expiry Settings button.
9.7 Loading Certificate Chain for Trusted Root
A certificate chain is a sequence of certificates where each certificate in the chain is signed
by the subsequent certificate. The last certificate in the list of certificates is the Root CA
certificate, which is self-signed. The purpose of a certificate chain is to establish a chain of
trust from a child certificate to the trusted root CA certificate. The CA vouches for the
identity of the child certificate by signing it. A client certificate is considered trusted if one of
the CA certificates up the certificate chain is found in the server certificate directory.
Figure 9-6: Certificate Chain Hierarchy
For the device to trust a whole chain of certificates, you need to combine the certificates
into one text file (using a text editor). Once done, upload the file using the 'Trusted Root
Certificate Store' field in the Certificates page.
Notes: The maximum supported size of the combined file of trusted chain of
certificates is 100,000 bytes (including the certificate's headers).