AudioCodes Mediant 500 MSBR, User Manual

Page: 128 / 1248

User's Manual 128 Document #: LTRT-10375
Mediant 500 MSBR
it. A client certificate is considered trusted if one of the CA certificates up the certificate
chain is found in the server certificate directory. For the device to trust a whole chain of
certificates per TLS Context, you need to import them into the device's Trusted Certificates
Store, as described below.
Figure 13-11: Certificate Chain Hierarchy
You can also import multiple TLS root certificates in bulk from a single file. Each certificate
in the file must be Base64 encoded (PEM). When copying-and-pasting the certificates into
the file, each Base64 ASCII encoded certificate string must be enclosed between "
-----
BEGIN CERTIFICATE----- " and " -----END CERTIFICATE----- ".
Note: Only Base64 (PEM) encoded X.509 certificates can be loaded to the device.

To import certificates into the Trusted Root Certificate Store:
1. Open the TLS Contexts table (see Configuring TLS Certificate Contexts on page 117).
2. In the table, select the required TLS Context index row, and then click the Trusted
Root Certificates link located below the table; the Trusted Certificates table appears.
3. Click the Import button, and then browse to and select the certificate file.
Figure 13-12: Importing Certificate into Trusted Certificates Store
4. Click OK ; the certificate is loaded to the device and listed in the Trusted Certificates
store.