Contents

Sign third-party certificates

To sign a third-party certificate

On the remote device to which you want to connect, generate the text for a Certificate Signing Request (CSR). Copy that text to the clipboard on the CIC server or copy it in a text file that you can access on the CIC server.
Use one of these paths:
- System Configuration > Configuration > Certificate Management > SIP/TLS Certificates Configuration > Modify > Third Party Certificate Signing
- IC Server > Lines > Line Configuration > TLS Security > Configure certificates and port mappings > Third Party Certificate Signing
Note: In order to access the TLS Security tab, you just first select TLS as the transport protocol on the Transport tab.
For the Digest Algorithm option, select either SHA-1 or SHA-256 as your preferred secure hash algorithm.
Paste the CSR text from step 1 into the Certificate Request To Sign box.
Click Sign button. The signed certificate and the signing authority certificate are generated. They appear in the Generated Certificates fields on the tab.
Under the field that displays the signed certificate, click Save As.
Specify the directory and file name for this certificate.

Tip: Include the name of the third-party device in the name.
Under the field that displays the signing authority certificate, click Save As.
Specify the directory and file name for this certificate.

Tip: Use a name that distinguishes this certificate from the signed certificate.

Note: Some third-party interfaces may let you paste the signed certificate or signed authority certificate data directly in to their interface, or you may wish to copy and paste this certificate text into your own file. In this case, use the Clipboard button to select and copy the signed certificate text to the clipboard for pasting into another application.
Copy the saved signed certificate and the saved CIC default line authority certificate to a USB flash drive. Then import them on the third-party device and continue the configuration there.