AudioCodes MediaPack MP-114, User Manual

Page: 69 / 164

User's Manual 6. Configuration Using the Web Interface
Version 6.6 69 MediaPack Series
6.5.1.4 TLS Contexts
This page allows managing the security certificates loaded on the device. The device is
shipped with a working certificate configuration. Use this page only as needed. For further
information, refer to the Security chapter in the Product Reference Manual.
The Certificates page allows you to configure X.509 certificates, which are used for secure
management of the device, secure SIP transactions, and other security applications.
Note: The device is shipped with an active TLS setup. Thus, configure certificates only
if required.
6.5.1.4.1 Replacing the Device's Certificate
The device is supplied with a working TLS configuration consisting of a unique self-signed
server certificate. If an organizational Public Key Infrastructure (PKI) is used, you may wish
to replace this certificate with one provided by your security administrator.

To replace the device's certificate:
1. Your network administrator should allocate a unique DNS name for the device (e.g.,
dns_name.corp.customer.com). This DNS name is used to access the device and
therefore, must be listed in the server certificate.
2. If the device is operating in HTTPS mode, then set the 'Secured Web Connection
(HTTPS)' parameter (HTTPSOnly) to
HTTP and HTTPS . This ensures that you have a
method for accessing the device in case the new certificate does not work. Restore
the previous setting after testing the configuration.
3. Open the Certificates page ( Configuration tab > System menu > Certificates ).
4. Under the Certificate Signing Request group, do the following:
a. In the 'Subject Name [CN]' field, enter the DNS name.
b. Fill in the rest of the request fields according to your security provider's
instructions.