So I am at my wits end here... we have had Avaya in our environment for a very long time, and I have been extremely comfortable with almost everything they have thrown our way.
But a few years ago, we introduced SIP in our environment, and at that time we were introduced to the PKI Certificates that make up the new security strategy. No one in my telecom group, including myself, knew anything about PKI Certificates other than it made the HTTPS websites work... so as a last result the BP installed Demo Certs and went on their mary way.
Now we are faced with some hurdles, that my PKI Feeble mind can't seem to figure out. How do we path our way out of the Demo Certs, and into another PKI Strategy that makes sense for us? Right now, we have lost the ability to use Equinox Clients on iOS because as of iOS release 13, the Demo Cert is no longer supported (And I totally get why). So what are the next steps here?
And that is what I am struggling with is, what is the next steps? We don't have a in-house CA (We use 3rd Party CAs for outward facing connections, and self signed for internal server to server connections). So that seems to lead us to using the SMGR as the Self Signing CA, but I have not figured out how to do that and use it in that manner.
I was hoping that the new Avaya Class of 20940W would help me, but it just confused me more.
So I am hoping someone here can water this down, and use crayons for me to paint me a picture on what the next steps look like.
Anyone else here in the same struggle? Has anyone here overcame this struggle, and would be willing to share some pointers and feedback, maybe even hold a running dialog here?
Thanks,
------------------------------
James Davis
Voice and Data Senior Engineer
University of Nebraska Medical Center
Omaha NE
------------------------------