AudioCodes Mediant 500 E-SBC, User Manual

Page: 98 / 920

User's Manual 98 Document #: LTRT-10437
Mediant 500 E-SBC
5. Click Generate Private Key ; a message appears requesting you to confirm key
generation.
6. Click OK to confirm key generation; the device generates a new private key, indicated
by a message in the Certificate Signing Request group.
Figure 10-6: Indication of Newly Generated Private Key
7. Continue with the certificate configuration, by either creating a CSR or generating a
new self-signed certificate.
8. Save the configuration with a device reset for the new certificate to take effect.
10.1.5 Creating Self-Signed Certificates for TLS Contexts
The following procedure describes how to assign a certificate that is digitally signed by the
device itself to a TLS Context. In other words, the device acts as a CA.

To assign a self-signed certificate to a TLS Context:
1. Before you begin, make sure that:
•
You have a unique DNS name for the device (e.g.,
dns_name.corp.customer.com). This name is used to access the device and
therefore, must be listed in the server certificate.
•
No traffic is running on the device. The certificate generation process is disruptive
to traffic and should be done during maintenance time.
2. Open the TLS Contexts page ( Configuration tab > System menu > TLS Contexts ).
3. In the TLS Contexts table, select the required TLS Context index row, and then click
the Context Certificates button, located at the bottom of the TLS Contexts page;
the Context Certificates page appears.
4. Under the Certificate Signing Request group, in the 'Subject Name [CN]' field, enter
the fully-qualified DNS name (FQDN) as the certificate subject.