Ultra Secure Mode
Polycom®, Inc. 829
Certificate Revocation
Certificate Revocation of IP Network and peer SIP TLS certificates for each defined IP Service can be
enabled, disabled and configured:
Revocation Method
One of three Certificate Revocation Methods can be selected:
● NONE (Default) - Certificate Revocation is not implemented.
● CRL - Requires at least one CRL file be installed, failing which an error message, At least one CRL
should be installed, is displayed.
● OCSP - When selected, additional configuration options are displayed.
Global Responder URL
The format of the URL is validated and must be of the format:
http(s)://responder.example.com/ocsp
The URL can be either http or https.
If the Global Responder URL does not respond an Active Alarm is raised.
Use Responder Specified in Certificate
The default for this check box is unchecked.
If the check box is checked Responder URL is taken from the certificate. If the certificate does
not contain a Responder URL, the Global Responder URL is used.
If the check box is unchecked the Global Responder URL is used. If the Global Responder
URL is incorrectly configured a message, Global responder URL must be configured, is
displayed.
Allow Incomplete Revocation Checks
If OCSP is selected:
If the check box is checked and the Global Responder or the Responder Specified in the
Certificate does not respond for any reason the certificate is not considered revoked.