336
3Com
®
VCX V7111 VoIP Gateway User Guide
Figure 129
Example of a Base64-Encoded X.509 Certificate
-----BEGIN CERTIFICATE-----
MIIDkzCCAnugAwIBAgIEAgAAADANBgkqhkiG9w0BAQQFADA/MQswCQYDVQQGEwJG
UjETMBEGA1UEChMKQ2VydGlwb3N0ZTEbMBkGA1UEAxMSQ2VydGlwb3N0ZSBTZXJ2
ZXVyMB4XDTk4MDYyNDA4MDAwMFoXDTE4MDYyNDA4MDAwMFowPzELMAkGA1UEBhMC
RlIxEzARBgNVBAoTCkNlcnRpcG9zdGUxGzAZBgNVBAMTEkNlcnRpcG9zdGUgU2Vy
dmV1cjCCASEwDQYJKoZIhvcNAQEBBQADggEOADCCAQkCggEAPqd4MziR4spWldGR
x8bQrhZkYhb7+4Q67ecf1janH7GcN/SXsfx7jJpreWULf7v7Cvpr4R7qI
JcmdHIntmf7JPM5n6cDBv17uSW63er7NkVnMFHwK1QaGFLMybFkzaeGrvFm4k3lR
efFhJgHYezYHf44LvPRPAq3o8pWDguJuZDIULPwv
Rw==
-----END CERTIFICATE-----
6
Before continuing, set the parameter HTTPSOnly = 0 to ensure you have a method of
accessing the device in case the new certificate does not work. Restore the previous
setting after testing the configuration.
7
In the Certificates screen
Figure 128
locate the server certificate loading section.
8
Click
Browse
and navigate to the
cert.txt
file, click
Send
File
.
9
When the operation is completed, save the configuration (see
Saving Configuration
) and
restart the V7111; the Embedded Web Server uses the provided certificate.
•
The certificate replacement process can be repeated when necessary (for
example, the new certificate expires).
•
It is possible to use the IP address of the V7111 gateway (for example, 10.3.3.1)
instead of a qualified DNS name in the Subject Name. This practice is not
recommended since the IP address is subject to changes and may not uniquely
identify the device.
•
The server certificate can also be loaded using ini file using the parameter
HTTPSCertFileName.
Client Certificates
By default, Web servers using SSL provide one-way authentication. The client is certain that
the information provided by the Web server is authentic. When an organizational PKI is used,
two-way authentication may be desired: both client and server should be authenticated using
X.509 certificates. This is achieved by installing a client certificate on the managing PC, and
loading the same certificate (in base64-encoded X.509 format) to the V7111 Trusted Root
Certificate Store. The Trusted Root Certificate file should contain both the certificate of the
authorized user and the certificate of the CA.
Since X.509 certificates have an expiration date and time, the V7111 gateway must be
configured to use NTP (see
Simple Network Time Protocol Support
) to obtain the current
date and time. Without a correct date and time, client certificates cannot work.
Summary of Contents for VCX V7111
Page 30: ...30 3Com VCX V7111 VoIP Gateway User Guide Readers Notes ...
Page 44: ...44 3Com VCX V7111 VoIP Gateway User Guide Readers Notes ...
Page 53: ...3Com VCX V7111 VoIP Gateway User Guide 53 Readers Notes ...
Page 54: ...54 3Com VCX V7111 VoIP Gateway User Guide ...
Page 211: ...3Com VCX V7111 VoIP Gateway User Guide 211 Figure 76 IP Connectivity Screen ...
Page 235: ...3Com VCX V7111 VoIP Gateway User Guide 235 Readers Notes ...
Page 236: ...236 3Com VCX V7111 VoIP Gateway User Guide ...
Page 240: ...240 3Com VCX V7111 VoIP Gateway User Guide Readers Notes ...
Page 245: ...3Com VCX V7111 VoIP Gateway User Guide 245 Readers Notes ...
Page 246: ...246 3Com VCX V7111 VoIP Gateway User Guide ...
Page 281: ...3Com VCX V7111 VoIP Gateway User Guide 281 Readers Notes ...
Page 282: ...282 3Com VCX V7111 VoIP Gateway User Guide ...
Page 298: ...298 3Com VCX V7111 VoIP Gateway User Guide Readers Notes ...
Page 315: ...3Com VCX V7111 VoIP Gateway User Guide 315 Readers Notes ...
Page 316: ...316 3Com VCX V7111 VoIP Gateway User Guide ...
Page 319: ...3Com VCX V7111 VoIP Gateway User Guide 319 Readers Notes ...
Page 320: ...320 3Com VCX V7111 VoIP Gateway User Guide ...
Page 346: ...346 3Com VCX V7111 VoIP Gateway User Guide Readers Notes ...
Page 351: ...3Com VCX V7111 VoIP Gateway User Guide 351 Readers Notes ...
Page 352: ...352 3Com VCX V7111 VoIP Gateway User Guide ...
Page 376: ...376 3Com VCX V7111 VoIP Gateway User Guide Readers Notes ...
Page 386: ...386 3Com VCX V7111 VoIP Gateway User Guide Readers Notes ...
Page 394: ...394 3Com VCX V7111 VoIP Gateway User Guide Readers Notes ...
Page 396: ...396 3Com VCX V7111 VoIP Gateway User Guide Readers Notes ...
Page 405: ...3Com VCX V7111 VoIP Gateway User Guide 405 Reader s Notes ...
Page 406: ...406 3Com VCX V7111 VoIP Gateway User Guide ...
Page 410: ...410 3Com VCX V7111 VoIP Gateway User Guide ...
Page 426: ...426 3Com VCX V7111 VoIP Gateway User Guide Readers Notes ...
Page 432: ...432 3Com VCX V7111 VoIP Gateway User Guide Figure 153 Prerecorded Tones Screen ...
Page 452: ...452 3Com VCX V7111 VoIP Gateway User Guide Readers Notes ...
Page 456: ...456 3Com VCX V7111 VoIP Gateway User Guide Readers Notes ...