Tls Configuration - Yealink Teams Series Administrator's Manual

• Thawte SSL CA
• StartCom Certification Authority
• StartCom Certification Authority G2
• Starfield Services Root Certificate Authority - G2
• RapidSSL CA
• Go Daddy Root Certificate Authority - G2
• Cybertrust Global Root
• COMODOSSLCA
• COMODO RSA Domain Validation Secure Server CA
• COMODO RSA Certification Authority
• AmazonRootCA4
• AmazonRootCA3
• AmazonRootCA2
• AmazonRootCA1
• Yealink Root CA
• Yealink Equipment Issuing CA
• SIP Core
Note:
Yealink endeavors to maintain a built-in list of most common used CA Certificates. Due to memory
constraints, we cannot ensure a complete set of certificates. If you are using a certificate from a commercial
Certificate Authority but is not in the list above, you can send a request to your local distributor. At this point,
you can upload your particular CA certificate into your phone.

TLS Configuration

The following table lists the parameters you can use to configure TLS.
Parameter
Description
Permitted Values
Default
Web UI
Parameter
Description
Permitted Values
Default
Web UI
static.security.trust_certificates
It enables or disables the phone to only trust the server certificates listed in the
Trusted Certificates list.
0-Disabled, the phone will trust the server no matter whether the certificate sent
by the server is valid or not.
1-Enabled, the phone will authenticate the server certificate based on the
trusted certificates list. Only when the authentication succeeds, will the IP
phone trust the server.
1
Security > Trusted Certificates > Only Accept Trusted Certificates
[1]
static.security.ca_cert
It configures the type of certificates in the Trusted Certificates list for the phone
to authenticate for TLS connection.
0-Default Certificates
1-Custom Certificates
2-All Certificates
2
Security > Trusted Certificates > CA Certificates
[1]
<y0000000000xx>.cfg
<y0000000000xx>.cfg
| Security Features | 80