Chapter 2: System Settings
71
them there. You will need to load the root certificate into the clients that should talk to
the snom ONE system.
There are various other sites available which provide a similar service. You may also
download the openSSL toolkit and compile your own certificate generator and set up
your own trusted network. If you have already done this to secure your other office
infrastructures (e.g., email or VPN), you can probably reuse those certificates.
Certificate Size and Format
Please use only 512 and 1024 bit certificates. The system currently has trouble handling
certificates with other sizes. The security and the performance on these certificates is still
reasonable.
The format of the certificate must be base64-encoded. You must include the private key
and the certificate in the upload. Please note that uploading the private key this way
might be intercepted by an intruder. You can minimize this risk by using the localhost
address from the local machine.
In order to provide the key, just enter the ASCII string that you received from the
trusted party, copy it into the text field, and press
Save
. The system will then present
this certificate to HTTP and SIP connections that require secure communications.
Summary of Contents for ONE IP
Page 4: ......
Page 19: ...Part I Getting Started...
Page 20: ...Part I Getting Started...
Page 47: ...Part II Administering the System...
Page 48: ...Part II Administering the System...
Page 195: ...Deploying the snom ONE IP Telephone System 526...
Page 223: ......