Unify V3R3 Specifications download pdf (Page 39)

A31003-D3000-P100-01-76A9, 10-2013

OpenStage and Desk Phone IP SIP V3, Security Checklist, Planning Guide 39

Addendum

Certificate Handling

Related Topics

Maximum number of erroneous login

attempts

Account lockout duration in minutes

Automatic logoff after not used period in

minutes

None There is no authentication of the server

Trusted The following is checked

• that it is trusted (this means: the chain of trust for the digital signature

provided by the remote entity ends up in one of the trusted (e.g. Root CA

certificates, which are preconfigured for that interface on the phone)

• that it is not expired (i.e. current date/time is within the certificate's given

validity period)

• that it is not revoked (using OCSP)

Full It is assumed the server is trusted and there is no need to perform any addi-

tional checks.

The following checks additional to the “Trusted” policy:

• that it has the correct identity (according to settings in altSubjectName and/

or the common name (CN) in the Subject) . This may be a FQDN, IPv4 or

IPv6 address

• that it has the correct use of the following critical extension:OCSP signing.

Admin Password User Password

1 2 ... 34 35 36 37 38 39 40 41 42 43 44

No comments

Unify V3R3 Specifications Page 39