Yealink SIP-T3 Administrator's Manual page 127

Administrator's Guide for SIP-T2 /T3 /T4 /T5 /CP920 IP Phones
0-Disabled
Permitted
1-Enabled, the desired module will authenticate the server certificate based on the trusted certificates
Values
list. Only when the authentication succeeds, will the desired module trust the server.
Default Blank
Security > Trusted Certificates > Module(auto_provision/xml_browser/remote_phone-
Web UI
book/sip/sopi/802_1x/dm/tr069) > Only Accept Trusted Certificates
Parameter static.security.ca_cert
It configures the type of certificates in the Trusted Certificates list for the phone to authenticate for TLS
Description
connection.
0-Default Certificates
Permitted
1-Custom Certificates
Values
2-All Certificates
Default 2
Web UI Security > Trusted Certificates > Module(Default) > CA Certificates
static.security.xmpp_xsi.ca_cert
static.security.xml_browser.ca_cert
static.security.remote_phonebook.ca_cert
static.security.dm.ca_cert
Parameter static.security.auto_provision.ca_cert
static.security.tr069.ca_cert
static.security.802_1x.ca_cert
static.security.sip.ca_cert
static.security.sopi.ca_cert
It configures the type of certificates in the Trusted Certificates list for the desired module to authen-
Description
ticate for TLS connection.
0-Default Certificates
Permitted
1-Custom Certificates
Values
2-All Certificates
Default Blank
Security > Trusted Certificates > Module(web_server/auto_provision/xml_browser/remote_phone-
Web UI
book/sip/sopi/802_1x/dm/tr069) > CA Certificates
Parameter static.security.cn_validation
It enables or disables the phone to mandatorily validate the CommonName or SubjectAltName of the
Description
certificate sent by the server.
Permitted 0-Disabled
1-Enabled
Values
Default 0
Web UI Security > Trusted Certificates > Module(Default) > Common Name Validation
static.security.xmpp_xsi.cn_validation
Parameter
static.security.xml_browser.cn_validation
121
<y0000000000xx>.cfg
<y0000000000xx>.cfg
<y0000000000xx>.cfg
<y0000000000xx>.cfg