Managing The Trusted Certificates List - Yealink VC800 Administrator's Manual

Managing the Trusted Certificates List

When the system serves as a TLS client and requests a TLS connection with a server, the system
should verify the server certificate sent by the server to decide whether it is trusted based on the
trusted certificates list.
The trusted certificates list contains the default and custom certificates.
Default Certificates: The system has 36 built-in trusted certificates. For more information

refer to Appendix B: Trusted Certificates
Custom Certificates: You can upload up to 10 trusted certificates to the system. The

format of the certificates must be *.pem, *.cer, *.crt and *.der.
Trusted certificates parameters on the system are described below:
Parameter
Only Accept
Trusted
Certificates
Common
Name
Validation
CA
Certificates
Description
Enables or disables the system to only trust
the server certificates in the trusted
certificates list.
Default: Enabled
Note: If it is enabled, the system will
authenticate the server certificate based on
the trusted certificates list. Only when the
authentication succeeds, will the system trust
the server.
If you change this parameter, the system will
reboot to make the change take effect.
Enables or disables the system to mandatorily
validate the CommonName or
SubjectAltName of the server certificate sent
by the server. This security verification rules
are compliant with RFC 2818.
Default: Disabled
Note: If you change this parameter, the
system will reboot to make the change take
effect.
Configures the type of certificates in the
Trusted Certificates list for the system to
authenticate for the TLS connection.
Default Certificates

Custom Certificates

All Certificates

Configuring Security Features
on page 264.
Configuration Method
Web User Interface
Web User Interface
Web User Interface
221