×
INTELLIGENT WORK FORUMS
FOR COMPUTER PROFESSIONALS

Log In

Come Join Us!

Are you a
Computer / IT professional?
Join Tek-Tips Forums!
  • Talk With Other Members
  • Be Notified Of Responses
    To Your Posts
  • Keyword Search
  • One-Click Access To Your
    Favorite Forums
  • Automated Signatures
    On Your Posts
  • Best Of All, It's Free!
  • Students Click Here

*Tek-Tips's functionality depends on members receiving e-mail. By joining you are opting in to receive e-mail.

Posting Guidelines

Promoting, selling, recruiting, coursework and thesis posting is forbidden.

Students Click Here

Jobs

Equinox and certificates

Equinox and certificates

Equinox and certificates

(OP)
Hi

I am trying to set up Equinox using TLS, however certificates are driving me nuts!
I am just a simple telephone engineer and not an IT security guru :)

This is on an IP500, I have the cert from the 500 installed on my PC OK, works fine with Web manager.

When I try to configure Equinox vis 46xxsettings.txt it fails with a red triangle and the message 'Failed to parse all certificates'

could anyone shed any light on this for me please?

Cheers

RE: Equinox and certificates

Is there a 46xxsetting.txt file in your directory?

If so, delete it, and let the system auto=generate a new one.

As long as you have the SIP registrar and other settings setup properly, should be good then

RE: Equinox and certificates

(OP)
No, I am using the auto generated one with any changes in 46xxspecials.txt (which only relates to making K175 Vantage use TCP instead of TLS)

RE: Equinox and certificates

Buy a UCC cert from go daddy and set your SANs (Subject Alternative Names) with your FDQN and SIP domain names. Equninox is quite picky with TLS certs. wildcards (*.domain type) are not allowed with SIP traffic.

This way you don't need to install anything on the PC, it will 'just work' with the auto gen 46xx.

Just to note though. When using these type of certs there seems to be a mjor issue with ASBCE not likeing them with J100s which we have out with Avaya currently.

Jamie Green

Avaya Registered Specialist Engineer

RE: Equinox and certificates

(OP)
jamie77 - I was coming to the conclusion that a 3rd party cert was the only way I was going to sort iy.
The self signed ones cause no end of bother.

Cheers

RE: Equinox and certificates

Definitely go the UCC SAN cert route. It will work better and is more secure.

Not recommending it but I have got it working with Wildcards. Search this forum and I'm sure you'll find it in one of the J100 or Equinox threads. Works with both (no SBC).

@jamie77 - thanks for the heads up on the TLS and ASBCE - Classic Avaya. Although now there is TLS and encrypted calls we don't deploy SBC's for remote access. We only use them for SIP trunking. We use Sonus (Ribbon).

What kills me was how easy it was to connect a Polycom via TLS to the IP Office when it took me weeks to get it working with Avaya's own products!

ACSS (SME)

RE: Equinox and certificates

Thats why we love 'em!! Evrything is so easy!!!

Jamie Green

Avaya Registered Specialist Engineer

RE: Equinox and certificates

(OP)
Equinox works OK using TCP, in-house but I get a constant warning triangle that the Contact Service is Unavailable?

RE: Equinox and certificates

I have setup a lot of Equinox with Certs.

Its all in the Knowledge base.

Piece of advice do not touch 46xxsettings file keep it autogenerated unless you have expierence with Custom Certs, this is not needed in this case.

Red Flag This Post

Please let us know here why this post is inappropriate. Reasons such as off-topic, duplicates, flames, illegal, vulgar, or students posting their homework.

Red Flag Submitted

Thank you for helping keep Tek-Tips Forums free from inappropriate posts.
The Tek-Tips staff will check this out and take appropriate action.

Reply To This Thread

Posting in the Tek-Tips forums is a member-only feature.

Click Here to join Tek-Tips and talk with other members!

Close Box

Join Tek-Tips® Today!

Join your peers on the Internet's largest technical computer professional community.
It's easy to join and it's free.

Here's Why Members Love Tek-Tips Forums:

Register now while it's still free!

Already a member? Close this window and log in.

Join Us             Close