Yealink SIP-T2 Series Administrator's Manual page 391

Parameter static.security.default_ssl_method
Description It configures the TLS version the IP phone uses to authenticate with the server.
0-TLS 1.0 only
3-SSL V23 (automatic negotiation with the server. The phone starts with TLS1.2 for negotiation.)
Permitted
Values
4-TLS 1.1 only
5-TLS 1.2 only
Default 3
Parameter static.security.trust_certificates
Description It enables or disables the IP phone to only trust the server certificates in the Trusted Certificates list.
0-Disabled, the IP phone will trust the server no matter whether the certificate sent by the server is valid
or not.
Permitted
Values
1-Enabled, the IP phone will authenticate the server certificate based on the trusted certificates list. Only
when the authentication succeeds, will the IP phone trust the server.
Default 1
Web UI Security->Trusted Certificates->Only Accept Trusted Certificates
Parameter static.security.ca_cert
It configures the type of certificates in the Trusted Certificates list for the IP phone to authenticate for TLS
Description
connection.
0-Default Certificates
Permitted
1-Custom Certificates
Values
2-All Certificates
Default 2
Web UI Security->Trusted Certificates->CA Certificates
Parameter static.security.cn_validation
It enables or disables the IP phone to mandatorily validate the CommonName or SubjectAltName of the
Description
certificate sent by the server.
Permitted 0-Disabled
Values 1-Enabled
Default 0
Web UI Security->Trusted Certificates->Common Name Validation
Parameter static.security.dev_cert
Description It configures the type of the device certificates for the IP phone to send for TLS authentication.
0-Default Certificates
Permitted
Values
1-Custom Certificates
Default 0
Web UI Security->Server Certificates->Device Certificates
[3]
[3]
[3]
[3]
<y0000000000xx>.cfg
<y0000000000xx>.cfg
<y0000000000xx>.cfg
<y0000000000xx>.cfg
<y0000000000xx>.cfg
Security Features
385