Tls Configuration - Yealink SIP-T5 Series Administrator's Manual

Administrator's Guide for SIP-T2 Series/T4 Series/T5 Series/CP920 IP Phones
Starfield Secure Certificate Authority - G2
l
HydrantID SSL ICA G2
l
Note
: Yealink endeavors to maintain a built-in list of most common used CA Certificates. Due to memory constraints, we can-
not ensure a complete set of certificates. If you are using a certificate from a commercial Certificate Authority not in the list
above, you can send a request to your local distributor. At this point, you can upload your particular CA certificate into your
phone.

TLS Configuration

The following table lists the parameters you can use to configure TLS.
Parameter account.X.sip_server.Y.transport_type
Description It configures the type of transport protocol.
0-UDP
1-TCP
Permitted
2-TLS
Values
3-DNS NAPTR, if no server port is given, the phone performs the DNS NAPTR and SRV queries for
the service type and port.
Default
0
Web UI Account > Register > SIP Server Y > Transport
Parameter static.security.default_ssl_method
It configures the TLS version to use for handshake negotiation between the phone and server (for
Description
example, SIP registration server, provisioning server).
0-TLS 1.0
3-SSL V23 (automatic negotiation with the server. The phone starts with TLS 1.2 for negotiation.)
Permitted
Values
4-TLS 1.1
5-TLS 1.2
Default 3
Parameter static.security.server_ssl_method
It configures the supported TLS version to use for handshake negotiation between the phone and
Description
web browser.
0-TLS 1.0, TLS 1.1 and TLS 1.2
Permitted
1-TLS 1.1 and TLS 1.2
Values
2-TLS 1.2
Default 1
Supported
All phones except T48G, T46G, T42G, T41P and T29G
Devices
Parameter static.security.trust_certificates
Description It enables or disables the phone to only trust the server certificates in the Trusted Certificates list.
0-Disabled
Permitted
1-Enabled, the phone will authenticate the server certificate based on the trusted certificates list. Only
Values
when the authentication succeeds, will the phone trust the server.
111
[1][2]
<MAC>.cfg
[3]
<y0000000000xx>.cfg
[3]
<y0000000000xx>.cfg
[3]
<y0000000000xx>.cfg