indi-2010-012-021
Koppeling OCS aan SURFcontact Project Projectjaar Projectmanager Auteur(s) Opleverdatum Versie
: : : : : :
SURFworks 2010 Alexander van den Hil Erik Dobbelsteijn 20-12-2010 1.0
Samenvatting Microsoft OCS is sterk in opkomst als UC oplossing binnen het hoger onderwijs. Daarnaast hebben veel instellingen de afgelopen jaren hardware gebasseerde H323 endpoints aangeschaft. Een logische vraag die dan naar voren komt is hoe je deze twee werelden met elkaar kan integreren. Een van de mogelijkheden is om dit te doen via de MCU van de SURFcontact dienst.
Voor deze publicatie geldt de Creative Commons Licentie “Attribution 3.0 Unported”. Meer informatie over deze licentie is te vinden op http://creativecommons.org/licenses/by/3.0/
Colofon Programmalijn Onderdeel Activiteit Deliverable Toegangsrechten Externe partij
: : : : : :
Stimulering gebruik & support Kennisdomein GSO: Unified Communications Pilot koppeling instellings UC met roombased videoconferencing Koppeling OCS aan SURFcontact open Twiyo
Dit project is tot stand gekomen met steun van SURF, de organisatie die ICT vernieuwingen in het hoger onderwijs en onderzoek initieert, regisseert en stimuleert door onder meer het financieren van projecten. Meer informatie over SURF is te vinden op de website (www.surf.nl).
!"#$%&&%$'()%"*&('*'"+,-'./0#01$,211'.(, 30445"'.%$'0"#,6(/7(/,899:,;8,700/, 6<;=.0"$%.$, !"#!$#$%!%&
'%($&
)(&*+,,-./0-123& &
-41560718+(3.&
!"#$%&%"'( 9:;<=+30>=0&,1-?0&--3&'4@=A0,>4-&'+-?13B/,+?-C&'++4&133+'>01-/&4+3?+C&'1?-+=+3D-4-3=13B&-3& :31D1-?&E+CC@31=>01+3/(&F3&?>0&5>?-4&71.&9:;<3-0&?-&=+CC@31=>01-C+B-.125A-?-3&+3?-4G+-5-3& 0@//-3&?-&9:;<=+30>=0&?1-3/0&-3&13/0-..13B-3&?1-&B-,4@15&C>5-3&'>3&H1=4+/+D0&IDD1=-& E+CC@31=>01+3/&,133-3&A@3&-1B-3&FEJ&13D4>/04@=0@@4(&JKFLI&A--D0&--3&M4++D&+D&E+3=-N0&'++4&?-& 5+NN-.13B&'>3&?-&07--&'1?-+&=+3D-4-3=13B&7-4-.?-3&+NB-G-0(&&
)*$#( O-,4@15-4/&'>3&?-&9:;<=+30>=0&?1-3/0&5@33-3&'1?-+=+3D-4-3=-3&C-0&B-,4@15-4/&'>3&H1=4+/+D0&IDD1=-& E+CC@31=>01+3/&9-4'-4&$%%P&;$&QRIE9ST&,133-3&>>3&9:;<3-0&>>3B-/.+0-3&13/0-..13B-3U&-3&'1=-&'-4/>(&&
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
[email protected]&'-4B>?-45>C-4&+N&?-&HE:&'>3&?-&9:;<=+30>=0&?1-3/0& >3?-4G12?/(& & *-&A>3?.-1?13B&'-4-1/0&5-331/&'>3&3-07-45-3U&*X9U&K13?+7/&$%%Y&>?C131/04>01+3&-3&IE9(&& & Z--/01N/[& K>33--4&13&--3&13/0>..>01-/0>N&B--3&13/0>..>01-+N01-/&+D&/=4--3/A+0/&-\N.1=1-0&>>3B-?@1?&7+4?-3U&?>3& C+-0-3&?-&/0>3?>>4?7>>4?-3&>>3B-3+C-3&7+4?-3(& H-0&R/-4'-4S&5>3&G+7-.&--3&D8/1-5-&C>=A13-U&'
[email protected]&C>=A13-&>./&--3&/-4'-44+.&,-?+-.?&7+4?-3&Q--3& R/-4'1=-S&?1-&+3?-4&H1=4+/+D0&K13?+7/&?4>>10T(&
-.$(/0.$.( )-3&B-,4@15-4&'>3&?-&IDD1=-&E+CC@31=>0+4&,12&--3&13/0-..13BU&5>3&]C10/&IE9&D-?-4>01-&?++4&?-& 13/0-..13B&0+-B-/0>>3&7+4?0#&=+30>=0&.-BB-3&C-0&?-&9:;<=+30>=0&9*&HE:&+C&?--.&0-&3-C-3&13&--3& HE:&'-4B>?-4/-//1-&13&9*&57>.10-10(&&
*
[email protected]?1>.-&C+B-.125A-?-3&?1-&,-++B?&G123&13&?-G-&N1.+0U&G123[&& • • •
H1=4+/+D0&IDD1=-&E+CC@31=>0+4&$%%P&+D&$%%P;$&'++4&K13?+7/& ^@?1+&13&O(P!!&57>.10-10& _1?-+&13&`($ab&57>.10-10U&EF<&4-/+.@01-&
*-G-&N1.+0&+3?-4/0-@30&B--3&N4-/-3=-U&=+30-30&/A>413BU&13/0>30&C-//>B13B&-3&=A>0&0@//-3&B-,4@15-4/& '>3&?-&E+CC@31=>0+4&-3&B-,4@15-4/&'>3&?-&9:;<=+30>=0&?1-3/0(& c133-3&?10&N4+2-=0&1/&--3&B-,4@15-4/A>3?.-1?13B&B-/=A4-'-3&?1-&,-/=A412D0&7-.5-&D@3=01+3>.10-10&?10& N.>0D+4C&,1-?0&'++4&-13?B-,4@15-4/U&-3&A+-&?-G-&D@3=01-&B-,4@150&5+3&7+4?-3(&
1,2$3( !""#$%&'!()*+,-.,/0102034.,45,-.6.,016./,3.7894:/,19724.:.,(;,<-8.==.5,>008,-.,.?/.85., 45/.8@
<5,B008,-.,45/.85.,45/.8@.8,4=,-., /0.3<53=1008/,/0/,-.,45/.85.,B<594/, >.4243C.4-=1.8=1.A/4.@,3..5,30.-.,0120==453E,F.,G-3.,=.8>.8,C008/,..5,7<=/405,/.,64K5E,"2=,C./, 7<=/405,><2/D,B<3,-.,45/.85.,45@8<=/89A/998,C4.8><5,3..5,5<-.243.,3.>023.5,05-.8>45-.5E,(5,-., 18<:/4K:,B0./,..5,@48.L<22,/9==.5,-.,G-3.,.5,-.,45/.85.,B<5L.3.,C./,01.5, :<8<:/.8,><5,C./,.?1.84B.5/..85./L.8:,L<<801,-.,B09-43, B03.24K:E,
4*,*#*'%$( `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
SNET@SARA LAN IP_EXT_SDMCU
FW ext
SD MCU
IP_EXT_EDGE DNS_EXT_EDGE_access DNS_EXT_EDGE_webconf DNS_EXT_EDGE_av
IP_INT_EDGE DNS_INT_EDGE TCP_INT_EDGE:4 45, 5062
IP_INT_DC DNS_INT_DC TLS
DC Office user
Edge
IP_INT_DNS DNS_INT_DNS
IP_EXT_XMPPGW DNS_EXT_XMPPGW
TLS
internet
DNS
TLS
IP_INT_CA DNS_INT_CA
XMPPgw
CA TLS
IP_INT_core DNS_INT_core DNS_INT_pool
IP_EXT_CORE DNS_EXT_CORE
CORE SIP 5061 FW ext
DMZ
FW ext
HTTPS 443 WC 444 AV 4444
Core net
&
/*+$(.$+5$+( d+>./&B-G-B?&1/&?-&=+4-&/-4'-4&?-&/-4'-4&?1-&A-0&=+30>=0&C-0&?-&HE:&+3?-4A+@?0(&X+4C>>.B-/N4+5-3& /0>>0&?-&HE:&/>C-3&C-0&?-&=+4-&/-4'-4&>=A0-4&?-G-.D?-&D14-7>..&-3&,12&'++45-@4&13&A-0G-.D?-&/@,3-0& QC--/0>.&C-0&N41'>0-&FM&>?4-//-3T(&F3&+3/&B-'>.&/0>>0&?-&HE:&>=A0-4&G123&-1B-3&D14-7>..&-3&A--D0&--3& N@,.1-5&FM&>?4-/(&*>>4+C&C+-0&?-&=+4-&/-4'-4&++5&--3&N@,.1-5&FM&>?4-/&A-,,-3(&*>>43>>/0&1/&--3& @10G+3?-413B&B-C>>50&+N&?-&4-B-.&?>0&>..-&'-4,13?13B-3&@10/.@10-3?&B-,4@15&C>5-3&'>3&JZ9&'++4&?-& '-1.1BA-1?U&+C?>0&?-&HE:&?>0&31-0&+3?-4/0-@30(&`-0&FM&>?4-/&'>3&?-&HE:&1/&-\N.1=1-0&0+-B-'+-B?&>./& R04@/0-?S&-3&A-0&'-1.1BA-1?/31'+&'>3&'1?-+/-//1-/&1/&+C.>>B&B-/=A4+-D?&'>3&R-3=48N01-&'-4N.1=A0S&3>>4& R'++45-@4&'++4&-3=48N01-S(&
6&'$(.$+5$+(( F3&?-G-&+N/0-..13B&1/&R4-C+0-&>==-//S&>=01-DU&--3&4+.&'>3&?-&)?B-&9-4'-4&?1-&A-0&C+B-.125&C>>50&'++4& B-,4@15-4/&'>3&?10&IE9&N.>0D+4C&+C&13&0-&.+BB-3&C-0&A@3&E+CC@31=>0+4&'>3>D&71..-5-@41B&7>>4(&IC& ?1-&4+.&C+B-.125&0-&C>5-3U&G123&?41-&@31-5-&=+C,13>01-/&'>3&FM&>?4-/&-3&JEM&N++40&3+?1B&Q'++4&?-& ^==-//&)?B-&9-4'-4U&'++4&?-&K-,&E+3D-4-3=13B&)?B-&/-4'-4&-3&?-&^_&)?B-&9-4'-4T(&`-0&1/&A-0& A>3?1B/0&+C&N++40&eeb&'++4&>..-&?41-&?-&/-4'-4/U&+C?>0&?1-&N++40&13&B>/03-07-45-3&C--/0>.& +N-3/0>>0(&*>0&,-0-5-30&-=A0-4&?>0&?41-&'-4/=A1..-3?-&N@,.1-5-&FM&>?4-//-3&3+?1B&G123(&IC?>0&?-& C--/0-&0-/0B-,4@15-4/&>=A0-4&R'41-3?-.125-S&D14-7>../&G100-3U&1/&-4&A1-4&'++4&B-5+G-3&+C&/0--?/& A-0G-.D?-&FM&>?4-/&C-0&>3?-4-&N++40-3&0-&B-,4@15-3(& `-0&1/&=+CC+3&N4>=01=-&+C&?-&!"#$%"$&*X9&3>C-3&0-&.>0-3&-13?1B-3&+N&(.+=>.(&F3&?-G-&+NG-0&1/&-=A0-4& '++4&A-0&R3>01'-S&?+C-13&R/@4D=+30>=0(3.S&B-5+G-3(&*>>4?++4&5@33-3&=+3D.1=0-3&+N04-?-3&0@//-3&*X9& 4-=+4?/&13&A-0&N@,.1-5-&-3&A-0&N41'f#?+C-13(&*++4&?-&2@1/0-&*X9&/-4'-4/&0-&51-G-3&+N&?-&2@1/0-& 130-4D>=-/&-3&+'-4.>N&13&^#4-=+4?/&0-&'-4C12?-3U&7+4?-3&N4+,.-C-3&'++45+C-3(&&
&
7$.8#3003( *-&HE:&1/&>./&=+30>=0SN-4/++3S&+N&0-&3-C-3&13&?-&E+CC@31=>0+4[&
& *++4&--3&'1?-+&/-//1-&0-&/0>40-3&C-0&C=@6/@4D=+30>=0(3.U&5+C0&?-&,-..-4&13&A-0&>@0+&>00-3?>30& /=A-4C&'>3&?-&HE:&0-4-=A0[&
& _-4'+.B-3/&5>3&C-0&?-&R?1>.N>?S&?-&2@1/0-&'-4B>?-45>C-4&B-5+G-3&7+4?-3[& &
& & &F3&+3?-4/0>>3?&'++4,--.?&1/&)415(?+,,-./0-1236/@4D=+30>=0(3.&'1>&?-&E+CC@31=>0+4&13B-.+B?&+N&?-& HE:U&13&?-&0-/0'-4B>?-44@1C0-&Q%Y%!"%!%%!TU&7>>4&c-40&4--?/&'1>&--3&`(b$b&'1?-+=+3D-4-3=13B& /0>01+3&1/&13B-.+B?[&
&
)3&++5&'>3>D&--3&-\0-43&?+C-13&5>3&^..>4?&`++1/C>&'>3&K13?-/A-1C&?--.3-C-3&C-0&G123& E+CC@31=>0+4&13&?-&HE:&/-//1-[& &
& `-0&13D+4C>01-1=++302-&Q1T&3>>/0&?-&=+30>=0N-4/++3&R9:;<=+30>=0S&13&A-0&,+'-3/0>>3?-&/=A-4C&B--D0& 7--4U&?>0&?-&/-//1-&'-4.++N0&'1>&?-&9:;<=+30>=0&HE:&-3&31-0&'1>&?-&13B-,+@7?-&/+D07>4-C>01B-& HE:&'>3&A-0&9:;<=+30>=0&IE9&N.>0D+4C&
/*"9#8.%$.( *-&+NG-0&A--D0&B-7-450U&C>>4&?-&HE:&'-4.++4&A>>4&5+NN-.13B&C-0&A-0&IE9&N.>0D+4C&+C& +3A-4.-1?,>4-&4-?-3-3(&)4&G123&07--&N4+,.-C-3&B-=+3/0>0--4?[&?-&>>3N>//13B-3&13&?-&HE:& 7-,130-4D>=-&7-4?-3&31-0&?>>?7-45-.125&>=01-DU&-3&>./&G-&>=01-D&7-4?-3&Q3>&?1'-4/-&>>3N>//13B-3&'>3& '-.?-3&?1-&?>>4'++4&31-0&>>3B-N>/0&G+@?-3&C+-0-3&A+-'-3&7+4?-3T&4->B--4?-&?-&HE:&3>&'-4.++N& '>3&012?&31-0&+N&?-&9FM&R13'10-S&,-41=A0-3&'>3@10&A-0&IE9&N.>0D+4C(&*1'-4/-&4-,++0/&'-4A1-.N-3&?10& N4+,.--C&+N&-31B&C+C-30U&C>>4&3>&'-4.++N&'>3&012?&A1-.N-3&4-,++0/&++5&31-0&C--4(&)4&1/&/N4>5-&'>3& --3&+D&C--4?-4-&,@B/&13&?-&HE:&13/0-..13B-3&?1-&,-04-5513B&A-,,-3&+N&?-&IE9&5+NN-.13B(& *-&>@?1+#&-3&'1?-+57>.10-10&G123&+'-4--35+C/01B&?-&B-,4@150-&0-=A31-5(&*-&-\04>&/0>N&?1-&A-0& 0+-'+-B-3&'>3&IE9&1304+?@=--40&0@//-3&?-&B-,4@15-4/&'>3&?-&E+CC@31=>0+4&-3&?-&B-,4@15-4/&'>3&?-& 9:;<=+30>=0&'-4B>?-45>C-4&1/&31-0&3+-C-3/7>>4?1B(& X-0&0+-3&?-&N1.+0&/0>400-&7-4?&IDD1=-&$%!!&'++4&?-&H>=&B-.>3=--4?&-3&?>>4+C&1/&++5& E+CC@31=>0+4(C>=&$%!!&B-0-/0(&IC?>0&?-G-&B--3&`($ab&+3?-4/0-@30U&1/&B--3&'1?-+&/-//1-&C-0&A-0& N.>0D+4C&C+B-.125(&H1=4+/+D0&A--D0&B--3&13?1=>01-&B-B-'-3&'>3&?-&4-.->/-&'>3&`($ab&'++4&?-& E+CC@31=>0+4(C>=(& *-&HE:&5>3&C>>4&+N&!&9FM&?+C-13&4-B1/04-4-3(&*>0&,-0-5-30&?>0&?-&HE:&31-0&0-B-.125&+N&--3&IE9& +CB-'13B&5>3&13.+BB-3&-3&+N&--3&>3?-4-&9FM&N4+\8&?1-&7-..1=A0&'++4&?-&?1-3/0&4-.-'>30&1/(&I'-41B-3/&
&
5>3&?-&HE:&G+3?-4&9FM&&4-B1/04>01-&7-.&9FM&+N4+-N-3&,->307++4?-3&?1-&B-41=A0&G123&>>3& g5>C-43@CC-4h6C=@(/@4D3-0(3.&
:0";$5$#%"'$"( d+?4>&E1/=+&Q'++4A--3&J>3?,-4BU&'++4A--3&E+?1>3T&D14C7>4-&'412B--D0&?1-&?-&HE:&+N&--3&/0>,1-.-& C>31-4&5>3&5+NN-.-3&>>3&IE9U&5>3&?-&5+NN-.13B&3>>4&,-.1-'-3&+N31-@7&B-0-/0&7+4?-3(&*>0&C+-0& 012?-3/&--3&C>130-3>3=-&713?+7&B-,-@4-3(& F3.+BB-3&13&--3&9:;<=+30>=0&'-4B>?-45>C-4&5>3&+N&07--&C>31-4-3[& # #
_1>&?-&>@0+#>00-3?>30U&?++4&=+30>=0&0-&C>5-3&C-0&C=@6/@4D=+30>=0(3.&-3&'-4'+.B-3/&C-0& 0+-0/2-/&13&?-&E+CC@31=>0+4&?-&5>C-4&0-&51-G-3& ;-=A0/4--5/U&?++4&=+30>=0&0-&C>5-3&C-0&g5>C-43@CC-4h6/@4D=+30>=0(3.&
*-&.>>0/0-&C-0A+?-&1/&A-0&C--/0&B-,4@15-4/'41-3?-.125U&C>>4&'-4-1/0&C--4&,-A--4/0>NN-3(&)4&C+-0& 3>C-.125&'++4&-.5-&5>C-4&++5&--3&IE9#B-,4@15-4&,133-3&?-&9:;<=+30>=0&IE9&+CB-'13B&>>3B-C>>50& 7+4?-3(& F3?1-3&?-&5+NN-.13B&/0>,1-.&7-450U&5>3&B-5-5-3&7+4?-3&+D&?-&57>.10-10&0-&'-4,-0-4-3&1/(&*-&IDD1=-& E+CC@31=>0+4&,1-?0&C+B-.125A-?-3&+C&4-B1/048&13/0-..13B-3&>>3&0-&N>//-3&C-0&,-04-5513B&0+0&?-& 4-/+.@01-(&
<%=#0'$>(!".30##03%$.30,,$"( ?**+;$+$%&%"'( J12?-3/&?-&'++4,-4-1?13B&G123&?-&'+.B-3?-&G>5-3&>>3B-'4>>B?[& # [email protected]&C>=A13-/&C-0&I9&Q713?+7/&$%%Y&ae&,10U&)30-4N41/-&'++4&?-&^*U&B--3&;$&B-,4@15-3iT& # M@,.1-5-&FM&>?4-//-3& # *X9&-3041-/& # M@,.1-5&=-401D1=>>0&'++4&)?B-&/-4'-4(&
:#'$@$"$(%".30##03%$.30,,$"(5**+(0##$(@09A%"$.( !( F3/0>..--4&@N?>0-/&Q9M$T& $( F3/0>..--4&_HK>4-&?41'-4/j0++.510[& A00N[jj5,('C7>4-(=+Cj/-.D/-4'1=-jC1=4+/10-/j/->4=A(?+k.>3B@>B-l-3m:9n=C?l?1/N.>8oEn -\0-43>.F?l!%$b!$"&& b( `-43+-C&-0A-43-0&>?>N0-4/[& & >( K^X&'++4&N@,.1-5-&>?>N0-4U& ,( Z^X&'++4&>?>N0-4&C-0&N41'f&>?4-/& e( *+73.+>?&-3&13/0>..--4&K14-/A>45& I3?-4&pp+=/=+4-p/A>4-&G123&?-&13/0>..-4/&'>3&0++./&3--4B-G-0U&G+>./&K14-/A>45&-0=(&
15$+2%9A3(@09A%"$'$'$5$".( & IP_EXT 192.87.110.175
DNS_EXT ad.surfcontact.nl.
IP_INT 10.20.30.40
DNS_INT Ad.surfcontact.nl
Netbios name SURFCONTACT-AD
192.87.110.176 192.87.110.177 &
ocscore.surfcontact.nl. ocsedge.surfcontact.nl.
10.20.30.41 10.20.30.51
Surfcontact-cor.surfcontact.nl Ocsedgeint.surfcontact.nl
SURFCONTACT-COR SURFCONTACT-EDG
)*@$%"(/*"3+*##$+( !( $( b( e(
`-43+-C&?-&C>=A13-&-3&A-4/0>40& F3101>.&E+3D1B@4>01+3&/=A-4C&Q'-4/=A1230&>@0+C>01/=A&,12&+N/0>40-3T&!&^??&4+.-/&71G>4?& F3/0>..--4&^*&*E&/-4'1=-/& E+3D1B@4--4&^*&*E&/-4'1=-/&Q?=N4+C+(-\-T[&
q(
&
a(
&
P(
&
Y(
&
"( !%( *-&71G>4?&13/0>..--40&>@0+C>01/=A&?-&Q130-43-T&*X9&/-4'-4&'++4&A-0&/@4D=+30>=0(3.&?+C-13& !!( `-4/0>40&?-&C>=A13-&3>&>D.++N&'>3&?-&71G>4?(& !$( O>&3>>4&^?C131/04>01'-&0++./&!&713?+7/&D14-7>..&710A&>?'>3=-?&/-=@4108&-3&'+-B& !%($%(b%(%j$e&0+-&+C&4-C+0-&?-/50+N&=+33-=01-/&'>3&0-&C+B-3&+30'>3B-3& !b( Z+B&13&'>3>D&--3&>3?-4-&C>=A13-&'1>&?-&Z^X&>?>N0-4&Q31-0&K^XT&+C&0-&G1-3&+D&?>0&7-450(& MNE *1/>,.-&?-&N@,.1-5-&FM&>?>N0-4&QK^XT&+C&N4+,.-C-3&C-0&?-&?+C-13&=+304+..-4&0-& '++45+C-3&+N&A-0&N@,.1-5-&3-07+45(&F.,-0B.45,A05/8022.8,4=,59,<22..5,503,B<<8,45/.85, 7.8.4:7<<8, !q( _+-B&?-&/-4'-44+.&R^=01'-&*14-=0+48&E-401D1=>0-&^@0A+4108S&0+-U&13=.@/1-D&K-,&-34+..C-30(& H>>5&-4&--3&)30-4N41/-&E^&-3&;++0&E^&'>3U&=4---4&--3&31-@7-&N41'>0-&5-8&-3&/.>&?-G-&+N(&*-& 3>>C&1/&9:;<=+30>=0#E^(&*-&?14-=0+48&'++4&.+BB13B&1/&=[pE-40Z+B& 16. IN-3&--3&=+CC>3?&N4+CN0&C-0&>?C131/04>0+4&4-=A0-3&-3&08N-&'-4'+.B-3/[&
&
Certutil -setreg policy\EditFlags +EDITF_ATTRIBUTESUBJECTALTNAME2 net stop certsvc net start certsvc !P( IN-3&13&?-G-j--3&31-@7-&HHE&?-&/3>N&13&R>=01'-&?14-=0+48&?+C>13/&>3?&04@/0/S&-3&'+-B&--3& >#4-=+4?&0+&'++4&A-0&FM&>?4-/&>>3&?-&130-43-&5>30&'>3&?-&)?B-&/-4'-4& Q+=/-?B-130(/@4D=+30>=0(3.T&
1/B(6&'$(.$+5$+( !( 90>40&?-&13/0>..>01-&'>3&IE9&90>3?>4?&)?101+3&-3&5.15&R2>S&+C&?-&*1/041,@0>,.-&0-&13/0>..-4-3(&
$( o1-/&R?-N.+8&+0A-4&/-4'-4&4+.-/S&!&*-N.+8&)?B-&9-4'-4&
)3&,-B13&C-0&RF3/0>..&<1.-/&D+4&)?B-&9-4'-4S&-3&'-4'+.B-3/&R>=01'>0-&)?B-&9-4'-4S(&X+0--4&A-0& /-4'1=->==+@30&-3&7>=A07++4?(& b( o1-/&R=+3D1B@4-&)?B-&9-4'-4[&
&
&
e( G1-&0+-.1=A013B&+3?-4&rING-0s&'++4&?-&'-45.>413B&'>3&+3?-4/0>>3?-&13/0>..>01-/0>N[&
&
q(
&
a(
&
P(
&
Y( & `1-4C--&1/&?-&RE+3D1B@4-&)?B-&9-4'-4S&/0>N&=+CN.--0(&
&
& "( F3/0>..--4&A-0&;++0&=-401D1=>>0&'>3&?-&--4?-4&B-C>>50-&E^&Q?+73.+>?&'1>&A00N[jj/@4D=+30>=0# >?(/@4D=+30>=0(3.jE-40)34+..j9:;<EIXJ^EJ#^*(/@4D=+30>=0(3.m9:;<=+30>=0#E^(=40T&-3&N.>>0/& ?-G-&13&-\N.1=1-0&Q?@/&31-0&>@0+C>01/=AT&13&?-&J4@/0-?&;++0&E-401D1=>01+3&^@0A+4101-/&=-401D1=>0-& /0+4-[&
!%( _-4'+.B&C-0&?-&/0>N&RE+3D1B@4-&E-401D1=>0-/&D+4&0A-&)?B-&9-4'-4S(&`-0&=-401D1=>>0&'++4&?-& 130-43-&130-4D>=-&7+4?0&>>3B-'4>>B?&,12&?-&130-43-&E^(&_135&++5&RF3=.@?-&=.1-30&)o:&13&0A-& =-401D1=>0-&4-t@-/0[&
!!( _>>5&7-450&A-0&4-=A0/04--5/&>>3'4>B-3&,12&?-&130-43-&E^&31-0&+C?>0&?-&)?B-&31-0&13&A-0& 130-43-&?+C-13&/0>>0(&O-3-4--4&?>3&--3&+DD.13-&4-t@-/0U&-3&B>&3>>4&A00N[jj/@4D=+30>=0# >?(/@4D=+30>=0(3.j=-40/4'j&-3&.+B&13&C-0&A-0&?+C-13>?C131/04>0+4>==+@30(&o1-/&R/@,C10&>& =-401D1=>0-&4-t@-/0&,8&@/13B&>&,>/-#ae#-3=+?-?&EHE&+4&MoE9u!%&D1.-vS&-3&N.>5&?>>413&A-0& =-401D1=>>0&4-t@-/0(&o1-/&08N-&RK-,&9-4'-4S&-3&'+-B&>./&^0041,@0-/&0+-[& 9>3[?3/l/1N(/@4D=+30>=0(3.n?3/l/1N(/@4D3-0(3.&
&
&
!$( *+73.+>?&A-0&(=-4&,-/0>3?&-3&'-4'+.B&?-&71G>4?&C-0&?10&=-4&,-/0>3?(& !b( `-0&=-401D1=>>0&'++4&?-&N@,.1-5-&130-4D>=-&'>3&?-&-?B-&/-4'-4&Q'++4&?-&D-?-4>01+3j>==-//& /-4'1=-T&7+4?0&>./&'+.B0&>>3B-'4>>B?&QG1-&++5& A00N[jjB+(C1=4+/+D0(=+CjD7.135jkZ135F?l!ab%Yb&T& !e( E4--4&--3&,-/0>3?&4-t@-/0(13D&C-0&>./&13A+@?[& & [Version] Signature="$Windows NT$ [NewRequest] Subject = "CN=sip.surfgroepen.nl" Exportable = TRUE KeyLength = 1024 KeySpec = 1 KeyUsage = 0xA0 ; Digital Signature, Key Encipherment MachineKeySet = True RequestType = PKCS10 [EnhancedKeyUsageExtension] OID=1.3.6.1.5.5.7.3.1 ; Server Authentication [RequestAttributes] SAN="dns=sip.surfcontact.nl&dns=sip.surfnet.nl" & MOE J8N-&+N&?-&=+CC>3?.13-[& A.8/8.P,Q5.L,8.P9.=/E45@,3?&3>>4&?-&N@,.1-5-&E^(&& MRE X>&+30'>3B/0&'>3&--3&(=-4&,-/0>3?&'>3&?-&E^U&08N-&2-[& A.8/8.P,Q..--4&?-&IE9&4-/+@4=-&510&0++./[& A00N[jj777(C1=4+/+D0(=+Cj?+73.+>?/j-3j?-0>1./(>/N\kD>C1.81?l"-P">$ba#=%?D#e>P$#>,>a# ">"a%$>"b-?%n?1/N.>8.>3Bl-3&&
!"( G-0&A-0&130-43-&N++40&3@CC-4&'>3&?-&^_&/-4'1=-&+C&3>>4&eeqU&7>30&?>0&7+4?0&/0>3?>>4?& ?++4&?-&=+4-&B-,4@150[&
& *-&@10-13?-.125-&=+3D1B@4>01-&G1-0&>./&'+.B0&@10[&
&
& X@&?-&=-401D1=>0-3&>>3B-'4>>B?U&B-V3/0>..--4?&-3&0+-B-7-G-3&G123U&5@33-3&?-&/-4'1=-/&B-/0>40& 7+4?-3&'>3@10&?-&*-N.+8C-30&K1G>4?&
1/B(9*+$(.$+5$+( !( Z+B&13&+N&?-&C>=A13-&C-0&>?C131/04>0+4&4-=A0-3(&
&
$( E+3D1B@4--4&Z^X&130-4D>=-[
b( e( q( a( P(
`-43+-C&?-&C>=A13-&-3&4-/0>40& _+-B&?-&C>=A13-&0+-&>>3&A-0&?+C-13&-3&A-4/0>40(& Z+B&13&>./&?+C-13&>?C131/04>0+4(& *-V3/0>..--4&@N?>0-&oc"PeqP!&Q>3?-4/&71.&IE9&31-0&>=01'-4-3T(& F3/0>..--4&?-&K13?+7/&$%%Y&<->0@4-&R^=01'-&*14-=0+48&*+C-13&E+304+..-4&0++./S&+3?-4& ;-C+0-&^?C131/04>01+3[&
&
&
Y( F3/0>..--4&?-&713?+7/&$%%Y&R4+.-S&FF9U&13=.@/1-D&?-&,12,-A+4-3?-&,-3+?1B?-&/-4'1=-/&?1-&?-& 13/0>..>01-71G>4?&/@BB-4--40&N.@/&RH>3>B-C-30&E+CN>01,1.108S&-3&K13?+7/&^@0A-301=>01+3[
&
"( !%( F3/0>..--4&IE9&90>3?>4?&)?101+3[&
&
&
!!( o1-/&R2>S(&*-&*-N.+8C-30&K1G>4?&'-4/=A1230[
!$( o1-/&RM4-N>4-&^=01'-&*14-=0+48S(&`-0&'+.B-3?-&/@,/=A-4C&'-4/=A1230[
!b( !e( !q( !a( !P(
o1-/&RN4-N&/=A-C>S&!&4@3&-3&'+.B&?-&71G>4?&C-0&?-&/0>3?>>4?&13/0-..13B-3& _+-4&?-&/0>NN-3&@10&+3?-4&R_-41D8&4-N.1=>01+3S&QG1-&?-&RA-.NS&.135&+3?-4&A-0&10-CT& o1-/&RN4-N&D+4-/0S&!&4@3&-3&'+.B&?-&71G>4?&C-0&?-&/0>3?>>4?&13/0-..13B-3& o1-/&RN4-N&=@44-30&*+C>13S&!&4@3&-3&'+.B&?-&71G>4?&C-0&?-&/0>3?>>4?&13/0-..13B-3& o1-/&R,>=5S&+C&0-4@B&0-&5-4-3&13&A-0&A++D?/=A-4C&'>3&?-&*-N.+8C-30&K1G>4?&
&
&
!Y( o1-/&R*-N.+8&90>3?>4?&)?101+3&9-4'-4S(&`-0&'+.B-3?-&/@,/=A-4C&'-4/=A1230[
!"( o1-/&R*-N.+8&9-4'-4S&!&4@3(& $%( o.15&Io&+C&?-&H-?1>&;@301C-&0-&13/0>..-4-3&-3&A-4/0>40&A-0&/8/0--C&3>&/@==-/'+..-&13/0>..>01-& '>3&?-&4@301C-(& $!( `-4'>0&?-&13/0>..>01-&3>&?-&A-4/0>40&C-0&?-&/0>3?>>4?&+N01-/&-3&3+0--4&?-&/-4'1=-&>==+@30/&-3& 7>=A07++4?-3(&;JE9-4'1=-&7>=A07++4?& $$( O>&'-4?-4&C-0&RE+3D1B@4-&/-4'-4S
&
&
$b(
&
$e(
&
$q(
QG1-&A00N[jj,.+B/(N+130,41?B-(=+Cjc.+B/j/=A-40Gm2-DDjM>B-/jM+/0(>/N\kmF*laY&A+-&?-G-& >=A0-4>D&'-4>3?-4?&5>3&7+4?-3T&
&
$a( $P( O>&'-4?-4&C-0&RE+3D1B@4-&E-401D1=>0-S[&
$Y( $"( b%( b!(
E+3D1B@4--4&3@&A-0&=-401D1=>>0&+N&?-&7-,/-4'-4&QG1-&?-&RA-.NS&.135T(& 90>40&?-&/-4'1=-/(& F3/0>..--4&?-&^?C131/04>01'-&0++./&Q4-=A0/&+N&A-0&*-N.+8C-30&K1G>4?&A++D?/=A-4CT(& F3/0>..--4&?-&IE9&4-/+@4=-&510&0++./[& A00N[jj777(C1=4+/+D0(=+Cj?+73.+>?/j-3j?-0>1./(>/N\kD>C1.81?l"-P">$ba#=%?D#e>P$#>,>a# ">"a%$>"b-?%n?1/N.>8.>3Bl-3&&
&
&
b$( O>&3>>4&?-&IE9&HHE&/3>N#13&Q>?C131/04>01'-&0++./T&-3&5.15&C-0&4-=A0/&+N&?-&4-/+@4=-&M++.& +3?-4&90>3?>4?&)?101+3&9-4'-4/&-3&51-/&?-&<4+30&)3?&M4+N-401-/[
bb( *-&'+.B-3?-&/0>N&1/&31-0&3++?G>5-.125&C>>4&/=A--.0&+33+?1B-&D+@0C-.?13B-3[& o.15&C-0&4-=A0/&+N&A-0&D+4-/0&13&?-&HHE&-3&51-/&'+1=-&N4+N-401-/U&-3&'+-B&--3&.+=>01+3&N4+D1.-& 0+-&C-0&?>>413&?-&'+.B-3?-&3+4C>.1G>[email protected][
be( H>>5&B-,4@15-4/>==+@30/&B-/=A150&+C&IE9&0-&B-,4@15-3(&IN-3&?>>40+-&--3&HHE&C-0&?-& IE9&/3>N#13&-3&?-&R^*&:/-4/&>3?&E+CN@0-4/S&/3>N#13(&_+-B&13&?-&.>>0/0-&+3?-4&R@/-4/S&Q+3?-4& A-0&,-04-DD-3?-&?+C-13T&@/-4&>==+@30/&0+-&-3&G+4B&?>0&R@/-4&C@/0&N>//7+4?&>0&3-\0&.+B+3S& @10/0>>0&-3&RN>//7+4?&3-'-4&-\N14-/S&>>3(&
&
&
bq( o.15&'-4'+.B-3/&C-0&4-=A0/&+N&?-&B-,4@15-4/&-3&51-/&R-3>,.-&D+4&IDD1=-&E+CC@31=>01+3/& 9-4'-4S[
ba( X@&C+-0-3&?-&B-,4@15-4/&++5&0+-B-/0>>3&7+4?-3&+C&0-&D-?-4-4-3&-3&+C&4-C+0-&0+-B>3B&0-& 5412B-3&0+0&IE9&Q'1>&?-&)?B-T(&o1-/&?>>4+C&+N&?-&=+4-&/-4'-4&13&?-&IE9&HHE&?-&@/-4/U&5.15& C-0&4-=A0/&-3&51-/&R=+3D1B@4-&IE9&@/-4/S&-3&'135&>>3&RD-?-4>01+3U&4-C+0-&@/-4&>==-//&-3& -3A>3=-?&N4-/-3=-S(& bP( d+4B&?>0&?-&7>=A07++4?-3&31-0&'-4.+N-3&'>3&?-&/-4'1=-&>==+@30/&7>>4+3?-4&>..-&/-4'-4+..-3& ?4>>1-3&Q'135&13&^*&RN>//7+4?&3-'-4&-\N14-/S&>>3&'++4&;JE9-4'1=-&-3&;JEE+CN+3-309-4'1=-& >==+@30/T(& &
/*&%0"(C/-(3*$5*$'$"( _+.B&?-&13/04@=01-/&?1-&0-&'13?-3&G123&+N&?-&J>3?,-4B&/10-[&A00N[jj777(0>3?,-4B(=+Cj/@NN+40j'1?-+# =+3D-4-3=13B#53+7.-?B-#,>/-jD>t#N4+?@=0/j0>3?,-4B#>?'>3=-?#C-?1>#B>0-7>8#ba%%# b%j=+3D1B@413B#04+@,.-/A++013B#0>3?,-4B#N4+?@=0/#+=/#!!!(2/Nk/->4=Al& &
&
!(
&
$(
&
b(
&
&
e( IN&?-&HE:&C+-0&13B-/0-.?&7+4?-3&A+-&?-&HE:&13&5>3&.+BB-3&+N&?-&IE9&=+4-&/-4'-4[
q( ;-,++0&?-&HE:(&^./&/-0013B/&'-4>3?-4-3U&,.125-3&?1-&31-0&B+-?&?++4B-'+-4?&0-&7+4?-3(&`-0&1/& ?>3&++5&+3?@1?-.125&7>33--4&?-&=+3D1B@4>01-&+N&?-&2@1/0-&C>31-4&>=01-D&1/(&^./&A-0&31-0&7-450U& .1250&A-0&2@1/0-&4-=-N0[&9FM&4-B1/04>4&@/>B-&?1/>,.-3U&4-,++0-3U&-3>,.-3(& &
&