# Enroll the CRE

After you have installed and configured your Call Recording Equipment (CRE), it must enroll with the SRC service to establish a "trust" relationship. Enrollment is a one-time task that ensures unauthorized personnel cannot use the SRC service to eavesdrop on phone conversations.

Enrollment consists of the following steps:

- CRE generates a request to SRC for a security certificate

- Upon approval, SRC issues a signed certificate with a unique ID, which the CRE downloads.

- The CRE then uses the certificate to establish authenticated SSL connections with SRC.

To handle a certificate request:

1. Access the server manager.
2. Under Security, click MBG client certificate. Certificate requests waiting for approval appear under the heading Queued CSRs.
3. Click the Certificate ID link.
4. After confirming the requester, do one of the following:

   - Click Approve to approve the CSR and allow the requester to establish taps

   - Click Reject to reject the CSR. The requester will be notified of the rejection and will not be able to establish taps

   - Click Cancel to return to the Certificate Management main screen without approving/rejecting the request

Note: It can take a minute or two for certificate approval to appear. To refresh the view, under Security, click MBG client certificate again.

To revoke an approved certificate:

Generated certificate numbers are unique. If you need to re-issue a certificate for a specific requester (for example, in the case of hardware failure or theft), you must first revoke the existing certificate.

Note: Do not use this option to disable a set. (Disabling sets is done on the Services tab.)

1. Access the server manager.
2. Under Security, click MBG client certificate. Approved CSRs appear under Approved Certificates.
3. Click the Certificate ID link and click Revoke. The requester can now make another request.