Page History

Add_workflow_for_techpubs

AUTH1	UserResourceIdentifier{userKey=8a00a0c85b2726c2015b58aa779d0003, userName='null'}
JIRAIDAUTH	SYM-27731
REV5	UserResourceIdentifier{userKey=8a00a0c85b2726c2015b58aa779d0003, userName='null'}
REV6	UserResourceIdentifier{userKey=8a00a0c85b2726c2015b58aa779d0003, userName='null'}
REV3	UserResourceIdentifier{userKey=8a00a02355cd1c2f0155cd26c9d6032b, userName='null'}
REV4	UserResourceIdentifier{userKey=8a00a02355cd1c2f0155cd26c91d01f9, userName='null'}
REV1	UserResourceIdentifier{userKey=8a00a02355cd1c2f0155cd26c8e901a1, userName='null'}

You can change the certificate installed on the

Spacevars

0	product

system by obtaining the signed certificate from a Trusted CA or from a local Stand-Alone Windows Certificate Authority, and importing it as outlined in the instructions on this page.

Importing a Server Certificate

Warning

title	Warning: Common Encryption Certificate Issues Arise from Missing Root Certificates

Did you only install the CA-signed SBC certificate, along with the intermediate certificate(s) sent by your issuing CA?
Did you get the following error message from the SBC?

Image Added

If so, the likely reason is a missing CA Root Certificate. The SBC does not have any pre-installed CA root X.509 certificates, unlike typical browsers found on your PC. Ensure the entire certificate chain of trust is installed on the SBC, including the root certificate. Acquire the CA root certificate as follows:

Contact your system administrator or certificate vendor to acquire the root, and any further missing intermediate certificate(s) to provision the entire certificate chain of trust within the SBC;
Load the root certificate, along with the intermediate and SBC certificates, according to Importing Trusted Root CA Certificates.

NOTE: Root certificates are easily acquired from the certificate authorities. For example, the root certificate for the GoDaddy Class 2 Certification Authority may be found at https://ssl-ccp.godaddy.com/repository?origin=CALLISTO . For more information about root certificates, intermediate certificates, and the SBC server (“leaf”) certificates, refer to this tutorial.

For other certificate-related errors, refer to Common Troubleshooting Issues with Certificates in SBC Edge.

Note

title	Before you begin

Before importing a new Signed Server Certificate, you must first import a valid Trusted CA Certificate.

...

In the WebUI, click the Settings tab.
In the left navigation pane, go to Security > SBC Certificates > SBC Edge Certificate.
Panel
borderStyle none
Caption
0 Figure
1 Sonus SBC Edge Certificate

Key Usage Field Descriptions

...

Select X.509 Signed Certificate from the Import menu at the top of the page.
Panel
borderStyle none
Caption
0 Figure
1 Import X.509 Signed Certificate
Chose the import mode (Copy and Paste or File Upload) from the Mode pull-down menu.
Panel
borderStyle none
Caption
0 Figure
1 Import Mode
Image Modified
If you chose File Upload:
1. Use the Browse button to find the file
2. Click OK.
If you choose Copy and Paste:
1. Open the file in a text editor.
2. Paste the contents into the Paste Base64 Certificate text field.
Click OK.

...

Select PKCS12 Certificate and Key from the Import menu at the top of the page.
Panel
borderStyle none
Caption
0 Figure
1 Import PKCS12 Certificate and Key
Image Modified
Enter the password used to export the certificate in the Password field.
Panel
borderStyle none
Caption
0 Figure
1 Import PKCS12 Server Certificate
Image RemovedImage Added
Browse for the PKCS certificate and key file.
Info
icon false
You must use the same password as was used when exporting the certificate and key.
Click OK

...

Space shortcuts

Page tree

Versions Compared

Old Version 7

New Version Current

Key

Importing a Server Certificate

Key Usage Field Descriptions