Cisco SPA2102-AU Provisioning Guide - Page 20

SPA Configuration and Provisioning Certificate Chain, authentication purposes.

Page 20 highlights

Using HTTPS Chapter 1 Provisioning Linksys VoIP Devices Figure 1-2 SPA Configuration and Provisioning Certificate Chain SPA Configuration-Provisioning Certificate Chain Sipura Technology, Inc Provisioning Server Root Authority 1 CERT PKEY Compiled into SPA Firmware Signs Provisioning Server Certificates SPA Root CA Certificate List SPA Firmware Load SPA PKEY CERT Authenticates Server in HTTPS Connection Authenticates Client in HTTPS Connection Provisioning Server CERT PKEY VoIP Service Provider Provisioning Server Entity HTTPS Server Configuration Files Root CA Certificate List Signs SPA Client Certificates Stored on Service Provider's Provisioning Server PKEY CERT Sipura Technology, Inc Client Certificate Root Authority 1 As indicated in the lower half of the diagram, a Linksys Client Certificate Root Authority signs each unique certificate. The corresponding root certificate is made available to service providers for client authentication purposes. 1-10 Linksys SPA Provisioning Guide Version 3.0

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94

1-10
Linksys SPA Provisioning Guide
Version 3.0
Chapter 1
Provisioning Linksys VoIP Devices
Using HTTPS
Figure 1-2
SPA Configuration and Provisioning Certificate Chain
As indicated in the lower half of the diagram, a Linksys Client Certificate Root Authority signs each
unique certificate. The corresponding root certificate is made available to service providers for client
authentication purposes.
Sipura Technology, Inc
Client Certificate Root Authority 1
Sipura Technology, Inc
Provisioning Server Root Authority 1
SPA
Signs SPA
Client Certificates
VoIP Service Provider
Provisioning Server Entity
Signs Provisioning
Server Certificates
PKEY
CERT
PKEY
CERT
CERT
PKEY
CERT
PKEY
SPA Firmware Load
Root CA
Certificate List
Compiled into
SPA Firmware
HTTPS Server Configuration Files
Root CA
Certificate List
Stored on Service Provider’s
Provisioning Server
Authenticates Server
in HTTPS Connection
Authenticates Client
in HTTPS Connection
SPA
Provisioning Server
SPA Configuration-Provisioning Certificate Chain