Avaya DES Server Setup

The Avaya DES (Device Enrolment Services) Server allows you to create an account and profile for a customer site and associated Devices (handsets) with the site. Devices can then be allowed to Auto Provision and will be provided with the details required to connect to the Avaya IPO

Additional settings and features are available. This document contains a basic setup only

Please refer to the official User Guide PDF in the link below to further understand these settings and features

https://des.avaya.com/downloads/Device_Enrollment_Services_User_Guide.pdf

IP500v2 Certificate

Confirm the IP500v2 has been configured correctly to allow JSeries handsets to register

If the Certificate has already been created (the below steps can be ignored to create the certificate)

Access the Avaya IP500v2 security settings with Manager

Select System, Certificates

Select SAN Details Origin: Generate from current LAN configuration

Select Regenerate

Confirm the Subject Alternative Name(s) has the correct details

Select OK

Select OK to save the Certificates page

Select File, Save Security Settings

Select File, Close Security Settings

Wait 2 minutes

Select File, Open Security Settings

Select the IP500v2 and login

Select System, Certificates

Confirm the Issue To: has updated to the name given when creating the certificate

Select View Identity Certificate

Select Details, Copy to File

Select Next, Next

Select a location to save the certificate

Select Next, Finish

NOTE: This certificate will need to be installed on any device where a user will be using Workplace Softphone with TLS

In Manager Security Settings

Select System, Certificates

Select Add in Trusted Certificate Store

Select Open

Select File, Save Security Settings

Access the IP500v2 with Web Manager

Example: https://192.168.86.200:8443/WebMgmtEE/WebManagement.html

Login as Administrator

Select Security, Security Settings

In the Trusted Certificate Store the Certificate Uploaded will be displayed

Select the download icon and download the Certificate as a .pem file

Setup Account and Profile in Avaya DES Server

Access https://des.avaya.com/

At the Login, Select Avaya-SSO

Enter a Profile Name

Add a HTTP(S) Server Type

Enter the Provisioning URL as the URL to access the Avaya IPO (could be a domain name or public IP)

Select the Green Tick

Select Submit

Confirm the entry is showing correctly in the Profile Management

Enter the Basic Information

A notification will confirm the account has been created successfully

Select Add

Select the Profile created in the drop down

Enter Site Name or Number (ADL)

Select the Green Tick to create the Site

Registration using Device MAC / Serial Number

Select Devices, Claim Device

Select Claim

Select Devices, Manage Devices

Select the Filter (top right)

Enter the MAC Address and select Enter to search for the Device

Select the Device (tick the box)

Select Associate

Select Yes

Select the Customer Site from the drop down

Select Submit

Select the Device (tick box)

Select Activate

If a new device, power on the device

If an existing device you will need to clear the settings back to default, select the 3 horizontal lines, select Administration, enter the Access Code CRAFT and Enter. Scroll down and select Reset to Defaults and select Reset to confirm

When the device asks “Do you want to activate auto provisioning now” select Yes (if nothing is pressed the timeout will default to Yes

The Device will access the DES server via the internet, the DES server will match the Device to the associated Profile and Account and provide the Device with the HTTPS URL to access the Avaya IPO

the Device will restart, download any firmware, and then request the extension login details, enter the extension number and login code to register the device

Registration using Enrolment Code

Instead of Claiming Device and Associating Device with Account

Select Site Management, By EC

Select the settings required

Select Submit

Device Setup for Enrolment Code Registration

If a new device, power on the device

If an existing device you will need to clear the settings back to default, select the 3 horizontal lines, select Administration, enter the Access Code CRAFT and Enter. Scroll down and select Reset to Defaults and select Reset to confirm

When the device asks “Do you want to activate auto provisioning now” select Yes (if nothing is pressed the timeout will default to Yes

The Device will access the DES server via the internet, the DES server will not match the Device and the Device will then prompt on the screen for an enrolment code

Enter the enrolment code, the Device will restart, download any firmware, and then request the extension login details, enter the extension number and login code to register the device

Troubleshooting

If the Device has issues connecting

Browse to the HTTPS URL from a PC on the internal network where the Avaya IPO is connected and confirm you reach the page

Browse to the HTTPS URL from a PC on an external network to where the Avaya IPO is connected and confirm you reach the page

If you cannot reach the page, then you will need to check the port forwarding on the router/firewall to confirm the correct ports are forwarding to the Avaya IPO

Default Ports are below (not all ports are required, this depends on the setup of the site)

5060 UDP/TCP

5061 TCP

443 TCP

8411 TCP

411 TCP

40750 – 50650 UDP (full range for RTP traffic)