ShoreTel SA-100, Installation Manual

Page: 57 / 84

Chapter 6: Configuring the SA-100 SA-100 Planning, Installation, and Administration Guide
ShoreTel 12.3 57
6.2.10.3 Enable HTTPS
You must have a certificate to run HTTPS. If you already have a certificate, use the
process described in "Upload HTTPS Certificate" on page 56 to upload it to the
appliance. (Wildcard certificates need be uploaded once only. These certificates are
automatically transferred to SA-100s already installed on the system and to new SA-
100s after they are installed.) If you do not have a certificate, you can obtain one (see
"Obtain SSL Certificate" on page 52 for instruction about obtaining a certificate) or
the system will automatically create a self-signing SSL certificate and private key. A
self-signing certificate will allow an SA-100 to create and participate in HTTPS
conferences, but as the certificate is not issued by a third party HTTPS security is not
optimized. When a self-signing certificate is used, users trying to access the secure
conference site will receive a warning message that the security provided is not
guarantied.
You can also enable HTTPS on selected SA-100 or on all SA-100 in your system.
Because the ShoreTel system uses a distributed approach, we recommends that you
enable HTTPS on all of your SA-100s. The distributed approach ShoreTel uses means
that multiple SA-100s can be used in a single conference. In conferences where
HTTPS is used, SA-100s that are not configured to use HTTPS cannot communicate
with SA-100s that are using HTTPS and are not allowed to join.
ShoreTel recommends that if you enable HTTPS on one SA-100 in your environment,
that you enable it on all SA-100s in your environment. Mixing HTTPS-enabled SA-
100s with SA-100s that do not have HTTPS enabled can cause problems. Users
assigned to appliances without HTTPS get an error when they try to access library
files stored on an HTTPS-enabled SA-100. The user is able to view the files, but a
horizontal blue stripe appears on the right hand side of the pane when they access
the files.
To enable HTTPS on an SA-100:
Step 1
Launch ShoreWare Director as a user with administrator privilege. (The
default administrator, admin, cannot be used.)
Step 2
Click
Administration > Platform Hardware > Voice Switches/Service
Appliances > Primary
. The Primary Voice Switches/Service Appliances
page appears.
Step 3
Select an SA-100 listing and in the Quick Launch column click
Launch
.
The Service Appliance Conference Administration Conferences page
appears as shown in Figure 6-8 on page 54.
Step 4
Click the
HTTPS
tab. The HTTPS tab appears as shown in Figure 6-9 on
page 55.
Step 5
In the Enable HTTPS section, make sure that HTTPS is enabled. The
function is enabled when the first line in the says the following:
HTTPS is currently enabled on this service appliance.
If the service appliance is disabled, do the following:
Step a
In the Enable HTTPS on the following Service Appliance field, select
the option that indicates the device on which you want to enable
HTTPS.
Note
Selecting All enables HTTPS only on the SA-100s that are
currently online. The enabling process must be repeated when