Enabling TLS encryption for SIP trunking

When you are sure that the connections work properly, you can enable TLS security to encrypt communications.

About this task

Use the Sametime® System Console to enable TLS (transport layer security) encryption through the Media Manager's administration page.

Procedure

On the Sametime System Console, log in to the Integrated Solutions Console as the IBM® WebSphere® administrator.
Navigate to the Sametime Media Manager's administration pages:
1. On the navigation tree, click Sametime System Console > Sametime Servers > Sametime Media Manager.
2. In the list of Deployment Identifiers, click one of the following:
  - If you installed all of the Media Manager components on a single computer, click the Media Manager's name.
  - If you installed the SIP Proxy/Registrar as a stand-alone server or a cluster, click the SIP Proxy/Registrar's name.
On the Configuration page, locate the "SIP proxy registrar" settings in the "Server Integration" section and in the "Audio Video Media" section, click Enable for the Secure Real-time Transport Protocol (SRTP) Encryption setting.
Click OK.
Restart the Conference Manager server or cluster:
- For a stand-alone Media Manager or Conference Manager, restart it now as follows:
  1. In the server's Integrated Solutions Console, click Servers > Server Types > server_type.
  2. In the list of servers, select your server and click the Restart button at the beginning of the table.
  3. Click the Refresh button and verify that all components are active.
- For a cluster of Conference Manager, synchronize and then restart the nodes:
  1. In the Deployment Manager's Integrated Solutions Console, click System Administration > Nodes.
  2. Select all nodes in the cluster, and then click the Full Resynchronize button at the beginning of the table.
  3. Back in the navigation tree, click System Administration > Node agents.
  4. Select all nodes in the cluster, and then click the Restart button at the beginning of the table.