Mitel 6800i Series Administrator's Manual page 766

Mitel 6800i Series SIP Phone Release 4.1.0 Administrator Guide
PARAMETER –
sips trusted certificates
Description
FORMAT
Default Value
Range
Example
A-107
CONFIGURATION FILES
startup.cfg, <model>.cfg, <mac>.cfg
Allows you to specify the Trusted Certificate files to use when the
phone uses the TLS transport protocol to setup a call.
The Trusted Certificate files define a list of trusted certificates. The
phone's trusted list must contain the CA root certificates for all the
servers it is connecting to. For example, if the phone is connecting to
server A which has a certificate signed by CA1, and server B that has
a certificate signed by CA2, the phone must have CA1 root certificate
and CA2 root certificate in its Trusted Certificate file.
This parameter is required when configuring TLS or Persistent TLS.
You can use this parameter in three ways:
• To download no certificates
• To download a certificate from the original configuration server
• To download a certificate from another specified server
To download a specific file, the string value MUST HAVE A
FILENAME at the end of the string. For example:
sips trusted certificates:
ftp://admin:admin!@1.2.3.4:50/path/phonesTrustedCert.pem
where "path" is the directory and "phonesTrustedCert.pem" is the
filename. If you do not specify a filename, the download fails.
See examples for each below.
Note: The certificate files must use the format ".pem". To create
custom certificate files to use on your IP phone, contact Mitel
Technical Support.
<file name>.pem
N/A
N/A
The following example downloads no trusted certificate file:
sips trusted certificates:
The following example downloads the trusted certificate file from the
original configuration server.
sips trusted certificates: phonesTrustedCert.pem
The following example uses FTP to download the firmware file
"phonesTrustedCert.pem" (trusted certificate file) from the "path"
directory on server 1.2.3.4 using port 50:
sips trusted certificates:
ftp://admin:admin!@1.2.3.4:50/path/phonesTrustedCert.pem