Polycom 7000 User Manual

Page of 437
 
System Security
Polycom, Inc. 
46
 
Copy the entire contents of the Encoded Request box (including the text -----BEGIN NEW 
CERTIFICATE REQUEST----- and -----END NEW CERTIFICATE REQUEST-----) and 
submit it to your certificate authority. 
Depending on the certificate authority, your CSR may be submitted via email or by pasting into a web 
page. 
Click OK to close the dialog. 
When your certificate authority has processed your request, it sends you a signed public certificate 
for your Polycom RealPresence DMA system. Some certificate authorities also send intermediate 
certificates and/or root certificates. Depending on the certificate authority, these certificates may 
arrive as e-mail text, e-mail attachments, or be available on a secure web page. 
The Polycom RealPresence DMA system accepts PKCS#7 or PKCS#12 certificate chains or single 
certificates. 
See also: 
 
 
Install a Certificate in the RealPresence DMA System 
The procedure below installs the certificate or certificate chain provided by the certificate authority. It 
assumes that you’ve received the certificate or certificate chain in one of the following forms: 
● A PFX, P7B, or single certificate file that you’ve saved on your computer. 
● PEM-format encoded text that you received in an e-mail or on a secure web page. 
To install a signed certificate that identifies the Polycom RealPresence DMA system 
When you receive your certificate(s), return to Admin > Local Cluster > Certificates
In the Actions list, select Add Certificates
In the Add Certificates dialog, do one of the following: 
Caution: Some CSR fields should not be modified
When you submit the CSR to your CA, make sure that the CA doesn’t modify any of the predefined 
SAN fields or the X.509v3 Key Usage or Extended Key Usage fields. Changes to these fields may 
make your system unusable. Contact Polycom technical support if you have any questions about this. 
Caution: Installing or removing certificates requires a restart
Installing or removing certificates requires a system restart and terminates all active conferences. 
When you install or remove a certificate, the change is made to the certificate store immediately, but 
the system can’t implement the change until it restarts and reads the changed certificate store. 
For your convenience, you’re not required to restart and apply a change immediately. This permits you 
to perform multiple installs or removals before restarting and applying the changes. But when you’re 
finished making changes, you must select Restart to Apply Saved Changes to restart the system 
and finish your update. Before you begin, make sure there are no active conferences and you’re 
prepared to restart the system when you’re finished.