Copyright 2010-2017 Obihai Technology, Inc.
43
Certificates for 802.1X Authentication
As described in the last section, a CA certificate and a client certificate may be required in certain authentication
modes. The required certificates must be installed on the device for the authentication to work properly. Note that a
dedicated CA certificate and client certificate must be installed on the phone to be used for 802.1x authentication.
These certificates must be stored in an internal memory location and the corresponding paths specified in the
802_1XCACertificate
and
802_1XClientCertificate
parameters. All certificates must be in in DER or
PEM format. In case of (EAP) TLS, the client certificate file must also include the private key (PEM) file appended to the
client certificate (i.e, concatenate the client certificate and private key into a single file to be stored internally).
The default values for the two certificate paths are
${USERDIR}/certs/ca.pem
and
${USERDIR}/certs/client.pem
where
${USERDIR}
represents the root of the user data folders in the
Internal drive, which can be accessed from the phone GUI: Main Menu
Settings
Storage
Device (use the < and >
keys to select
Internal
)
There are several methods to install these certificate files:
a)
From the phone GUI (Main Menu
Settings
Storage
Device), copy the files from a USB flash drive attached
to the phone from the GUI and paste them into the Internal drive
b)
Package the files together with other Phone Customization Data to upload to the phone via remote
provisioning. In this case, the file path should use the macro
${ITSPDIR}
as the root folder to refer to these
certificate files. Please read the section on Phone Customization Data for more details
c)
Use a OBi IP Phone XML App to install the files into an internal location. The XML APP may be pushed to the
phone using SIP/NOTIFY or HTTP/POST method, or pulled by the phone by invoking an Action URL function via
a feature key or softkey. Please refer to
on how to create a Phone XML App.
