Mitel 6867i Administrator's Manual page 804

Mitel 6800 Series SIP Phone Release 4.2.0 Administrator Guide
PARAMETER –
sips root and intermediate
certificates
DESCRIPTION
FORMAT
DEFAULT VALUE
RANGE
EXAMPLE
A-106
CONFIGURATION FILES
startup.cfg, <model>.cfg, <mac>.cfg
Allows you to specify the SIP Root and Intermediate Certificate files
to use when the phone uses the TLS transport protocol to setup a
call.
The Root and Intermediate Certificate files contain one root
certificate and zero or more intermediate certificates which must be
placed in order of certificate signing with root certificate being the first
in the file. If the local certificate is signed by some well known
certificate authority, then that authority provides the user with the
Root and Intermediate Certificate files (most likely just CA root
certificate).
This parameter is required when configuring TLS (optional for
Persistent TLS.)
You can use this parameter in three ways:
• To download no certificates
• To download a certificate from the original configuration server
• To download a certificate from another specified server
To download a specific file, the string value MUST HAVE A
FILENAME at the end of the string. For example:
sips root and intermediate certificates:
ftp://admin:admin!@1.2.3.4:50/path/phonesRootCert.pem
where "path" is the directory and "phonesRootCert.pem" is the
filename. If you do not specify a filename, the download fails.
See examples for each below.
Note: The certificate files must use the format ".pem". To create
custom certificate files to use on your IP phone, contact Mitel
Technical Support.
<filename>.pem
N/A
N/A
The following example downloads no root and intermediate
certificate file:
sips root and intermediate certificates:
The following example downloads the root and intermediate
certificate file from the original configuration server.
sips root and intermediate certificates: phonesRootCert.pem
The following example uses FTP to download the firmware file
"phonesRootCert.pem" (root and intermediate certificate file) from
the "path" directory on server 1.2.3.4 using port 50.
sips root and intermediate certificates:
ftp://admin:admin!@1.2.3.4:50/path/phonesRootCert.pem