Provisioning Certificates

[Blitz]

Hi,

I do not have a call manager in my lab and I want to simulate authentication (for 802.1x) of Nortel 1120E phone with EAP-TLS. I've provisioned it using TFTP (system.prv) with:

eap=tls;
eapid1=iphone;
eappwd=password;
ca=http://CA_IP_Address/certsrv/mscep/mscep.dll
cahost=iphone;
cadomain=domain.com;

Certificates for that user is already created and on the CA.

Is there a way to manullay import a certificate on the phone using TFTP instead of the Call Manager?

BTW, 802.1x works fine in my setup for computers.

Thanks

[Michael McNamara]

Hi Blitz and welcome to the forums!

I haven't done any work personally with EAP-TLS authentication and the Nortel IP phones.

Have you reviewed the technical configuration guide?

I'll dig it up for you if you haven't see it, otherwise I don't believe I'll be able to help much.

Perhaps someone else here has some experience with EAP-TLS authentication using 802.1x and Nortel's IP phones.

Good Luck!