Polycom RealPresence RMX 4000, Руководство администратора

Страница: 860 / 1101

Ultra Secure Mode
Polycom®, Inc. 829
Certificate Revocation
Certificate Revocation of IP Network and peer SIP TLS certificates for each defined IP Service can be
enabled, disabled and configured:
Revocation Method
One of three Certificate Revocation Methods can be selected:
●
NONE (Default) - Certificate Revocation is not implemented.
●
CRL - Requires at least one CRL file be installed, failing which an error message, At least one CRL
should be installed, is displayed.
●
OCSP - When selected, additional configuration options are displayed.
 Global Responder URL
 The format of the URL is validated and must be of the format:
http(s)://responder.example.com/ocsp
 The URL can be either http or https .
 If the Global Responder URL does not respond an Active Alarm is raised.
 Use Responder Specified in Certificate
 The default for this check box is unchecked.
 If the check box is checked Responder URL is taken from the certificate. If the certificate does
not contain a Responder URL, the Global Responder URL is used.
 If the check box is unchecked the Global Responder URL is used. If the Global Responder
URL is incorrectly configured a message, Global responder URL must be configured, is
displayed.
 Allow Incomplete Revocation Checks
If
OCSP is selected:
 If the check box is checked and the Global Responder or the Responder Specified in the
Certificate does not respond for any reason the certificate is not considered revoked.