Avaya Aura® Messaging (AAM) needs to communicate with Avaya Aura® Session Manager (SM) whose identity certificates have been signed by Avaya Aura®…

To establish a secure TLS connection, Avaya Aura® Messaging (AAM) must trust the identity certificate of the Session Manager (SM). Since SM's certificate is signed by the System Manager (SMGR) Certificate Authority (CA), AAM must have the SMGR CA certificate in its trust store. This is a manual administrative task. The administrator must first export the SMGR CA certificate from the SMGR web interface and then import it into the AAM's trusted certificate store through the AAM administration interface. This explicit action is required to establish the initial chain of trust.

A. The certificate is not retrieved automatically. Establishing trust with a root Certificate Authority requires a deliberate and secure manual action by an administrator to prevent man-in-the-middle attacks.

C. The initTM command is used for initializing or resetting the Trusted Manager security subsystem within AAM itself, not for importing external trusted CA certificates from other systems like SMGR.

D. The enrollment process is for AAM to request and obtain its own identity certificate from a CA. To securely initiate enrollment, AAM must first trust the CA, making the installation of the trusted CA certificate a prerequisite.

1. Avaya Aura® Messaging Documentation:

Document: Administering Avaya Aura® Messaging, Release 7.1 (December 2017)

Section/Page: Chapter 5: Security, Section: "Certificate management", Sub-section: "Adding a trusted certificate", Page 113.

Quote/Content: The procedure explicitly details a manual process: "Log on to the Messaging Administration interface... On the Security menu, click Certificate Management... Click Trusted Certificates... Click Add... Browse to the certificate file that you want to add... Click Install." This confirms the certificate must be manually installed.

2. Avaya Aura® System Manager Documentation:

Document: Administering Avaya Aura® System Manager, Release 8.1.3 (November 2021)

Section/Page: Chapter: "Security", Section: "Certificates, keys, and trust management", Sub-section: "Downloading the CA certificate from the trust store of System Manager", Page 319.

Quote/Content: This section provides the steps for an administrator to manually download the CA certificate from System Manager, which is the first step before it can be imported into another entity like AAM. The process is described as: "Log in to the System Manager web interface... Navigate to Security > Certificates > Authority... Select the CA certificate... Click Download."