You can change the certificate installed on the Sonus SBC 1000/2000 system by obtaining the signed certificate from a Trusted CA or from a local Stand-Alone Windows Certificate Authority, and importing it as outlined in the instructions on this page.
Importing a Server Certificate
Before you begin
Before importing a new Signed Server Certificate, you must first import a valid Trusted CA Certificate.
SHA2-256 Certificate Compatibility
SHA2-256 CA Certificates may be used for the SBA, SBC, and Lync 2013 Servers. Lync 2010 requires that all devices employ ALL SHA1 Certificates. For more information see the Microsoft SHA1 Deprecation Policy.
- In the WebUI, click the Settings tab.
In the left navigation pane, go to Security > SBC Certificates > Sonus Certificate.
Key Usage Field Descriptions
Enhanced Key Usage
To import an X.509 signed certificate:
- Select X.509 Signed Certificate from the Import menu at the top of the page.
Chose the import mode(Copy and Paste or File Upload) from the Mode pull-down menu.
- If you chose File Upload:
- Use the Browse button to find the file
- Click OK.
- If you choose Copy and Paste:
- Open the file in a text editor.
- Paste the contents into the Paste Base64 Certificate text field.
- Click OK.
To import a PKCS12 Certificate and Key:
Select PKCS12 Certificate and Key from the Importmenu at the top of the page.
- Enter the password used to export the certificate in the Password field.
Browse for the PKCS certificate and key file.
- Click OK
Verifying the Signed Server Certificate
Once you have imported the Signed Server Certificate:
- In the Issuer panel, ensure the Common Name field has changed from Self-Signed to the issuer's Common Name.
- In the Certificate panel,
- Ensure that the Enhanced Key Usage field indicates TLS Web Server Authentication.
Ensure that the Verify Status field indicates OK.
If the Verify Status field does not indicate OK, repeat the steps aboveto obtain a valid certificate.