Mitel 6867i Administrator's Manual page 114

Mitel 6800 Series SIP Phone Release 4.2.0 Administrator Guide
PARAMETER
IN
IP PHONE UI
Cert Validation
Check Expires
3-44
PARAMETER IN PARAMETERS IN
MITEL WEB UI CONFIGURATION
FILES
Validate https validate
Certificates certificates
Check Certificate https validate
Expiration expires
DESCRIPTION
Enables or disables the HTTPS validation
of certificates on the phone. When this
parameter is set to 1, the HTTPS client
performs validation on SSL certificates
before accepting them.
Notes:
If you are using HTTPS and the
1.
certificates are not valid or are not
signed by Comodo, CyberTrust,
DigiCert, Entrust, GoDaddy,
GeoTrust, Mitel MBG,
(Class 3 Secure Server CA - G4),
Thawte, TrustZone, or Verisign the
phones fail to download configuration
files.
Defining this parameter as "0"
2.
(disabled) significantly reduces
security for the provisioning process
to encryption only. Validation of the
chain-of-trust (i.e. the originator of the
files) will not be performed if this
feature is disabled. Therefore,
disabling HTTPS validation of
certificates is only recommended for
troubleshooting purposes or when
self-signed certificates are in use.
For more information, see Chapter 4,
"HTTPS Server Certificate Validation"
page 4-37.
Enables or disables the HTTPS validation
of the expiration of the certificates. When
this parameter is set to 1, the HTTPS
client verifies whether or not a certificate
has expired prior to accepting the
certificate.
Note: If the "https validate expires"
parameter is set to enable, the clock on
the phone must be set for the phone to
accept the certificates.
For more information, see Chapter 4,
"HTTPS Server Certificate Validation"
page 4-37.
Symantec
on
on