Chapter 2 Basic AdministrationGenerating a Secure Certificate14 Application Gateway Administration GuideChanging the License Status of an IP PhoneWhen the Application Gateway accepts a connection from an IP phone, itrecords the MAC address of the phone. Once the maximum allowedlicenses are associated with phones, additional connection attempts resultin an error message.You can free licenses for other phones by changing the status of anobsolete phone to unlicensed.To change a phone’s license status:1 In the Administration Tool, go to the Operation > Advanced page.You will be prompted to log in to the Application Gateway Monitor.2 Enter your administrative user credentials.A VNC-like window appears, with the License Monitor window open.Extensions are sorted in ascending order.3 To change the status of a phone, right-click the phone and then clickToggle Status.If you have not installed a license that includes support for IP phones, nophones will be listed in the License Monitor.Generating a Secure CertificateYou should install on the Application Gateway a digital X.509 certificatethat belongs to your company. This will ensure that all SSL transactionswill pass with no error warnings to phone users. Certificates from Verisignand Thawte are supported.The Application Gateway accepts a Privacy Enhanced Mail (PEM) formatcertificate file. PEM is a text format that is the Base-64 encoding of theDistinguished Encoding Rules (DER) binary format. The PEM formatspecifies the use of text BEGIN and END lines that indicate the type ofcontent that is being encoded.Before you can upload a certificate to the Application Gateway, you willneed to generate a Certificate Signing Request (CSR) and private key. Werecommend using Linux OpenSSL to administer any certificate tasks. IfLinux is not available, we recommend the Cygwin UNIX environment for