Administration of the Avaya G350 Media Gateway - Avaya Support

OverviewTable 15: Critical security parameters 3 of 3Key Description/Usage StorageFixed Serial Number secretEphemeral Serial NumbersecretThe TDES key used for the firstexchange of the serial number and newsession key between Gateway andS8300/Blade server entityThe TDES key used for serial numberand key renewal. This key is periodicallyre-negotiated between S8300/Bladeserver entity and the Gateway.3 of 3Public keysTable 16 lists the public keys available in the module:Table 16: Public keysKeyEphemeral DH phase-1 publickeysEphemeral DH phase-2 publickeysImage download certificate(Avaya root CA RSA public key)License download public keyDescription/UsageGenerated for VPN IKE Phase 1 keyestablishmentGenerated for VPN IKE Phase 2 PFS keyrenewalUsed for authentication of software download.The Avaya Root certificate is hard-coded in theGateway image and is used directly forauthentication of the chain of trust of the AvayaSigning Authority that is downloaded togetherwith the software.Used for authentication of license file validity. Thelicense signing authority public key is hard-codedin the Gateway image and is used directly forauthentication of the digital signature embeddedin the license file.Issue 3 January 2005 299