Deployment Tool with TLS
86
Configuring the Deployment Tool for TLS
Press the button denoted by the Certificate Icon
on the Operations
Pane to view the TLS Configuration Dialogue.
The left-side of the dialogue shows a list of the various trusted CA certifi-
cates held by the Deployment Tool to authenticate phones.
The icon
denotes a trusted certificate, while the icon
denotes a
certificate which is invalid because today’s date is outside of its valid cal-
endar period. The right-side of the dialogue shows the details of the cur-
rently selected certificate. Any of these certificates can be used to authen-
ticate phones. For security, the Deployment Tool controls the addition of
new trusted certificates to the list. Certificates can be readily deleted from
the list by pressing the “Delete Certificate” button, towards the bottom of
the dialogue. This removes the currently selected certificate from the list.
The bottom of the dialogue shows the subject DN expected in the end-en-
tity certificates received from the target phones.
The same DN is used by the Deployment Tool when configuring a batch of
phones, so the name is not likely to be specific to any individual phone.
The name is a sequence of identifiers, separated by commas. The identi-
fiers can be in any order. Whitespace is ignored. The subject DN should
not have a null value.
Exiting the dialogue prompts the user to save or undo the changes made
to the list of trusted certificates or the subject DN. The trusted certificates
and subject DN are held in files on the PC’s hard-disk.