{"id":1798,"date":"2024-08-20T15:43:54","date_gmt":"2024-08-20T20:43:54","guid":{"rendered":"https:\/\/www.convergedsystems.com\/blog\/?p=1798"},"modified":"2024-08-20T15:43:54","modified_gmt":"2024-08-20T20:43:54","slug":"why-you-need-to-update-your-avaya-ssl-certificates","status":"publish","type":"post","link":"https:\/\/www.convergedsystems.com\/blog\/why-you-need-to-update-your-avaya-ssl-certificates\/","title":{"rendered":"Why you need to update your Avaya SSL certificates"},"content":{"rendered":"

\"Website<\/a>
\nWhen was the last time you updated your Avaya<\/a> Secure Sockets Layer (SSL) certificates?<\/p>\n

Ensuring those security certificates are current should be at the top of your to-do list. Renewing these certificates is a crucial aspect of Avaya system maintenance that businesses frequently overlook.<\/p>\n

Here\u2019s why SSL certificates matter for Avaya system functionality and how to ensure yours aren\u2019t outdated, according to the Converged Communications Systems (CCS) team of Avaya experts.<\/p>\n

What are Avaya SSL certificates?<\/h2>\n

Avaya Aura Session Manager\/System Manager, Avaya Session Border Controller (ASBCE), Avaya Aura Device Services (AADS) and IP Office servers require named SSL certificates (SAN – Subject Alternative Name). Avaya servers do not support wildcard certificates.<\/p>\n

SSL certificates provide security for SIP trunking, remote applications (softphones), user registration, and connections\/communications.<\/p>\n

Why you need current security certificates<\/h2>\n

The importance of security certificates can\u2019t be overstated. They affect the functionality of systems, roles, and phones. An improper or invalid certificate can bring down your entire system.<\/p>\n

Expired certificates lead to network vulnerabilities and insecure communications. Failure to update them might not block communication on SIP trunking or remote phones. However, if a remote phone, phone server, or ASBCE reboots, it will most assuredly cause phones to fail to register.<\/p>\n

You can expect internal phones that do not use an FQDN (Fully Qualified Domain Name) to work unsecured. They will likely provide a consistent alarm notification on the internal h323 IP phone displays. Internal SIP phones might not register in this scenario.<\/p>\n

How to update your Avaya SSL certificates<\/h2>\n

Updating involves potential downtime depending on the software releases of the servers. The process involves a few steps:<\/p>\n