MBG Client Certificates

This panel enables you to manage all Certificate Signing Requests (CSRs) in the queue of this server, and any signed certificates issued by this server's Certificate Authority (CA).

To begin the process of obtaining a certificate, the client application issues a CSR to the Mitel Networks CA on the MBG server. For details on how to do this, consult your application documentation. When the MBG server receives the CSR, it appears in a queue on the Certificate Management panel. You must then approve the CSR and issue the certificate by following the procedure found below. At the completion of these steps, authenticated connections will be possible.

If necessary, you may also reject CSRs that are pending approval, and revoke certificates that have previously been approved.

Note:

Approve or Reject a Certificate Signing Request

To approve or reject a CSR:

  1. Log into the MBG Server Manager.
  2. Under Security, click MBG client certificates. Certificate requests waiting for approval appear under the heading Queued CSRs.
  3. Click the Certificate ID link.
  4. After confirming the requester, do one of the following:
    • Click Cancel to return to the main screen without approving/rejecting the request.
    • Click Approve to approve the CSR. Note: The approved CSR is listed as a certificate under the Approved Certificates list. It can take up to two minutes for the approved certificate to appear.
    • Click Reject to remove the CSR from the list. Note: If you reject the request, the requester must regenerate it.

Revoke a Certificate

To revoke an approved certificate:

Generated certificate numbers are unique. If you need to re-issue a certificate for a specific requester (for example, in the case of hardware failure or theft), you must first revoke the existing certificate.

Note: Do not use this option to disable a set.

  1. Log into the MBG Server Manager.
  2. Under Security, click MBG client certificates. Approved certificates appear under the heading Approved Certificates.
  3. Click the Certificate ID link and then click Revoke. The requester can now make another request.

View Details of Mitel's Signing Certificate

To view details regarding Mitel's signing certificate:

  1. Log into the MBG Server Manager.
  2. Under Security, click MBG client certificates.
  3. View details at the top of the page:
    Field Name Details
    Issuer Lists the following information for the certificate authorization company that issued the certificate:
    C: country code
    ST: state or province
    L: locality name (for example: city name)
    O: name of the certificate authorization authority: “Mitel Networks”
    OU: name of the organizational unit
    CN: server host name
    Authority/email Address: email address of the Certificate Authority
    Subject Lists the following information for the certificate holder:
    C: country code
    ST: state or province
    L: locality (for example, city name)
    O: organization name (your company name)
    OU: organizational unit (for example, department name)
    CN: Web Proxy server hostname
    Not before Date and time when the certificate takes effect.
    Not after Date and time when the certificate expires.