Generating a Unique TLS Certificate for Scopia
®
XT Desktop
server
About this task
You can secure Scopia
®
XT Desktop's media and signaling between Scopia
®
XT Desktop server
and Avaya Scopia
®
Management using TLS encryption. TLS enables network devices to
communicate securely using certificates, to provide authentication of the devices and encryption of
the communication between them. This method also checks the data integrity of messages.
By default, audio and video between Scopia
®
XT Desktop server and Scopia
®
XT Desktop Client
are transmitted using the UDP protocol. If Scopia
®
XT Desktop server fails to establish the UDP
connection with its client, it sends media over TCP. If this is the case your media is protected using
TLS together with other data streams between Scopia
®
XT Desktop server and Scopia
®
XT
Desktop Client.
Important:
Using encryption is subject to local regulation. In some countries it is restricted or limited for
usage. For more information, consult your local reseller.
Figure 32: Encrypting communications using TLS
Each time a video network device starts the TLS communication session, it sends its own signed
certificate together with the CA root certificate and requests the same certificates from the other
devices to which it wants to connect. After both devices verify each other's identity, a secure TLS
connection can be established. Exchanging certificates between devices is part of the TLS protocol;
it happens in the background and is transparent to a user.
Securing Your Scopia
®
XT Desktop Deployment
44
Avaya Scopia
®
XT Desktop Server Installation Guide
August 2015