Registration Controls - Cisco TelePresence Administrator's Manual

Protocols
Field Description
Certificate Controls whether revocation checking is performed for
revocation certificates exchanged during SIP TLS connection
checking establishment.
mode
Use OCSP Controls whether the Online Certificate Status Protocol
(OCSP) may be used to perform certificate revocation
checking.
Use CRLs Controls whether Certificate Revocation Lists (CRLs) are
used to perform certificate revocation checking.
Allow CRL Controls whether the download of CRLs from the CDP
downloads URIs contained in X.509 certificates is allowed.
from CDPs
Fallback Controls the revocation checking behavior if the
behavior revocation status cannot be established, for example if
the revocation source cannot be contacted.
Treat as revoked: treat the certificate as revoked (and
thus do not allow the TLS connection).
Treat as not revoked: treat the certificate as not revoked.
Default: Treat as not revoked

Registration controls

This section contains the registration controls for standard and outbound SIP registrations. The configurable
options are:
Cisco VCS Administrator Guide (X8.1.1)
Configuring SIP
Usage tips
We recommend that revocation
checking is enabled.
To use OCSP, the X.509 certificate
to be checked must contain an
OCSP responder URI.
CRLs can be used if the certificate
does not support OCSP.
CRLs can be loaded manually onto
the VCS, downloaded
automatically from preconfigured
URIs (see Managing certificate
revocation lists (CRLs) [p.288]), or
downloaded automatically from a
CRL distribution point (CDP) URI
contained in the X.509 certificate.
Treat as not revoked ensures that
your system continues to operate in
a normal manner if the revocation
source cannot be contacted,
however it does potentially mean
that revoked certificates will be
accepted.
Page 85 of 507