18.7.1. OpenScape 4000 
Requirements for SPE
IMPORTANT:
SPE certificates can be configured at the gateways
even if SPE is deactivated.
- An NTP server must be configured for time synchronization.
- The following must be set in AMO ZANDE SPESUPP=YES: CHANGE-ZANDE:TYPE=SECURITY,SPESUPP=YES; In case AP shelves or SoftGate are configured also following command should be executed: CHANGE-SIPCO:TYPE=SECURITY,IPDAENCR=Y;
- In case of duplex configuration, the standby node should be restarted as well:
EX-REST:TYPE=UNIT,UNIT=BPS,RSLEVEL=HARD; EX-REST:TYPE=UNIT,UNIT=BP,RSLEVEL=HARD;
- Following subscriber settings must be verified: The parameter CLASSEC=SECURE must be set in AMO SDAT for each SPE subscriber:
CHANGE-SDAT:TYPE=DATA1,CLASSEC=SECURE;
- You have to check in AMO CGWB for HFA stations if the value in the parameter branch TYP=GLOBIF is TLSP=4061.