Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Note
If your node has a SHA-2 256 signed server certificate, the SBC will not interoperate with Lync 2010 or earlier OCS/Lync versions. The signature algorithm ( sha256WithRSAEncryption ) is shown in the Certificate panel of the Sonus
Spacevars
0company
SBC Certificate page in the UI.

...

  1. In the WebUI, click the Settings tab.
  2. In the left navigation pane, go to Security > SBC Certificates > Sonus SBC Edge Certificate.

    Panel
    borderStylenone

    Caption
    0Figure
    1Sonus SBC Certificate

...

  1. In the Issuer panel, ensure the Common Name field has changed from Self-Signed to the issuer's Common Name.
  2. In the Certificate panel,
    1. Ensure that the Enhanced Key Usage field indicates TLS Web Server Authentication.
    2. Ensure that the Verify Status field indicates OK.
      If the Verify Status field does not indicate OK, repeat the steps aboveto obtain a valid certificate.

      Info
      iconfalse

      According to RFC3280, the Netscape CertType field is obsolete and has been replaced by the X509v3 Key Usage field.
      Most modern browsers require the Enhanced Key Usage field for certificate acceptance based on use purpose.

      Panel
      borderStylenone

      Caption
      0Figure
      1Verify Signed Server Certificate

       

Info
iconfalse
  • Server (Sonus
    Spacevars
    0company
    SBC 1000/2000) certificates with a 4096 RSA Key are not supported due to the amount of time required to generate a key and process calls.
  • Trusted Root CA certificates with a 4096 RSA Key are supported, but have not been thoroughly tested.