Dialogic 4000 Series SU4.1 Manual de usuario descargar pdf (Pagina 85)

Data Security

How to Retrieve Keys and Certificates from a PFX File for Use in Diva

SIPcontrol

In the following procedure openssl is used as example converter tool.

1. Export the private key file from the PFX file:

openssl pkcs12 -in filename.pfx -nocerts -out protected-key.pem

2. Remove the passphrase from the private key as required by Diva SIPcontrol:

openssl rsa -in protected-key.pem -out key.pem

3. Export the certificate file from the PFX file:

openssl pkcs12 -in filename.pfx -clcerts -nokeys -out cert.cer

4. Export the Root CA certificate file from the PFX file:

openssl pkcs12 -in filename.pfx -cacerts -nokeys -out cacert.cer

Using Certificates with Microsoft® Office Communications Server 2007

Microsoft

Office Communications Server 2007 requires that:

 Server certificates contain one or more CRL (Certificate Revocation List) distribution

points.

CRL distribution points are locations from which CRLs can be downloaded to verify

that the certificate has not been revoked since the time it was issued. The CRL

distribution point is an extension within the digital certificate that can be used if the

CA (certification authority) in your PKI (Public Key Infrastructure) has a CRL

distribution point.

 Server certificates support EKU (Enhanced Key Usage).

EKUs are needed for server authentication and ensure that the certificate is valid only

for the purpose of authenticating servers. This EKU is essential for MTLS (Mutual TLS).

 The gateway server certificate has an FQDN (Fully Qualified Domain Name), either in

the Certification field CN (Common Name) / SN (Subject Name) or SAN (Subject

Alternative Name), or both.

Using Certificates with Microsoft® Lync™ Server 2010

Lync Server requires that the gateway server certificate must contain the FQDN configured

for the gateway in the Lync Topology Builder. This FQDN must be specified in the CN or

SAN. Alternatively, it can be specified in both locations.

Generating Private Key Files and Certificates

Microsoft

Active Directory Certificate Services is a role of the Windows Server 2008

operating system. On Windows Server 2008, it can be installed through the Add Roles

Wizard. On Windows Server 2003, this service is a component and can be installed through

the Windows Component Wizard.

Note: Do not install the Microsoft Active Directory Certificate Services on your DMG4000

Gateway. Install it on a separate computer.

1 2 ... 80 81 82 83 84 85 86 87 88 89 90 ... 225 226

Sin comentarios

Dialogic 4000 Series SU4.1 Manual de usuario Pagina 85