# Enroll the Call Recording Equipment

After you have installed and configured your Call Recording Equipment (CRE), it must enroll with the SRC service to establish a "trust" relationship. Enrollment is a one-time task that ensures unauthorized personnel cannot use the SRC service to eavesdrop on phone conversations. After enrollment is complete, you can enable:

- direct call recording globally and for individual devices or DNs

- indirect call recording for an ICP.

Enrollment consists of the following steps:

- CRE generates a request to SRC for a security certificate

- Upon approval, SRC issues a signed certificate with a unique ID, which the CRE downloads.

- The CRE then uses the certificate to establish authenticated SSL connections with SRC.

To handle a certificate request:

1. Access the server manager.

2. Under Security, click Certificate Management. Certificate requests waiting for approval appear under the heading Queued CSRs.

3. Click the Certificate ID link.

4. After confirming the requester, do one of the following:

1. - Click Approve to approve the CSR and allow the requester to establish taps

   - Click Reject to reject the CSR. The requester will be notified of the rejection and will not be able to establish taps

   - Click Cancel to return to the Certificate Management main screen without approving/rejecting the request

Notes:

- It can take a minute or two for certificate approval to appear. To refresh the view, under Security, click Certificate Management again.

- Most errors that occur during approval are due to duplicate certificate IDs. Check the Certificate Management panel for duplicates. If the duplicate existing certificate is not correct, revoke it and repeat your certificate request.

To revoke an approved certificate:

Generated certificate numbers are unique. If you need to re-issue a certificate for a specific requester (for example, in the case of hardware failure or theft), you must first revoke the existing certificate.

Note: Do not use this option to disable a set. (Disabling sets is done on the Services tab.)

1. Access the server manager.

2. Under Security, click Certificate Management. Approved CSRs appear under the heading Approved Certificates.

3. Click the Certificate ID link and then click Revoke. The requester can now make another request.