You can configure your video network, whether it is a SCOPIA Solution or a third party
deployment, to support Transport Layer Security (TLS) for the SIP signaling protocol. If you
have the SCOPIA Management redundant solution, it is important to configure redundancy
before proceeding with TLS configuration. See the Administrator Guide for SCOPIA
Management for details.
Note
Using encryption is subject to local regulation. In some countries it is restricted or limited for
usage. For more information, consult your local reseller.
The TLS protocol is based on a public and private keys for authorization and encryption,
exchanged between SCOPIA Management and different components to allow an authenticated
and secure connection. Generating the CSR creates a pair of keys, public and private. The
public key is placed in a certificate and signed by a certification authority (CA).
As you configure your deployment for TLS, you need to generate a certificate signed request
for every component that uses TLS in your deployment and send it to your network
administrator for creating a CA signed certificate. A CA has its own certificate—the CA root
certificate. When the CA signed certificate is ready, you upload it into the component for
which it was created, together with the CA root certificate.
In some cases, when the CA signing the certificate is not a known trusted source, you must
obtain an additional certificate vouching for the trustworthiness of the CA. These certificates
are known as intermediary certificates, and must be signed by a trusted CA.
Some third-party components of your deployment may have pre-installed certificates.
Each time a TLS connection is established, a deployment component that starts the TLS
communication session requests another component to produce its signed certificate together
with the CA root certificate if not already available. After the second component verifies its
identity with these certificates, a secure connection can be established. Exchanging
certificates between components is part of the TLS protocol; it happens in the background
and is transparent to a user.
TLS is used to secure the connection between SCOPIA Management and the SCOPIA TIP
Gateway.
6
Securing Your Video Network Using TLS
RADVISION | Deployment Guide for SCOPIA TIP Gateway Version 8.0
Securing Your Video Network Using TLS | 43
