Managing The Server Certificates - Yealink MeetingEye 600 Administrator's Manual

• GeoTrust Primary Certification Authority
• GeoTrust Global CA
• Class 3 Public Primary Certification Authority
• -Thawte Personal Freemail CA
• thawte Primary Root CA
• -VeriSign Universal Root Certification Authority
• Equifax Secure Certificate Authority
• DigiCert High Assurance EV Root CA
• Equifax Secure Global eBusiness CA-1
• Yealink Equipment Issuing CA
• GeoTrust Primary Certification Authority - G2
• VeriSign Class 1 Public Primary Certification Authority - G3
• VeriSign Class 3 Public Primary Certification Authority - G3
• VeriSign Class 3 Public Primary Certification Authority - G4
• Deutsche Telekom Root CA 2
• Class 1 Public Primary Certification Authority
• Symantec Class 3 Secure Server CA - G4
• Symantec Class 3 Secure Server CA – G
• quickconnect.starleaf.com
• yealinkvc.com
• StarLeaf CA
• Class 1 Public Primary Certification Authority - G2
• Class 2 Public Primary Certification Authority - G2
• Class 3 Public Primary Certification Authority - G2
• Class 4 Public Primary Certification Authority - G2
Note:
The most common used CA Certificates are built in Yealink phones. Due to memory constraints,
we cannot ensure a complete set of certificates. If there is no the desired certificate in the above
list, contact your distributor for the desired one. After that, you can upload the certificate into your
phone. For more information on uploading custom CA certificate, refer to
(TLS)
.

Managing the Server Certificates

The system can serve as a TLS server. When clients request a TLS connection with the system, the
system sends the server certificate (device certificate) to the clients for authentication.
About this task
The server certificate contains the default and the custom certificates, and you can specify the certificate
type sent by the endpoint to the client for authentication.
Default Certificates: a unique server certificate and a generic server certificate.
•
Only if no unique certificate exists, the system may send a generic certificate for authentication.
Custom Certificates: You can only upload one server certificate to the endpoint. The old server
•
certificate will be overridden by the new one. The format of the server certificate files must be *.pem
or .cer, and the size should be less than 5M.
Procedure
1. On your web user interface, go to Security > Server Certs.
2. Configure and save the following settings:
| Configuring the Security Features | 241
Transport Layer Security