Transport Layer Security (Tls); Supported Cipher Suites - Yealink SIP-T3 Administrator's Manual

Administrator's Guide for SIP-T2 /T3 /T4 /T5 /CP920 IP Phones
Values
Default Blank
Related Topics
Basic Regular Expression Syntax for Digit Map

Transport Layer Security (TLS)

TLS is a commonly-used protocol for providing communications privacy and managing the security of message
transmission, allowing the phones to communicate with other remote parties and connect to the HTTPS URL for pro-
visioning in a way that is designed to prevent the data from being eavesdropped and tampered.
Yealink phones support TLS version 1.0, 1.1, 1.2, and 1.3. When TLS is enabled for an account, the SIP message of
this account will be encrypted, and a lock icon appears on the LCD screen after the successful TLS negotiation.
Note
: To improve the security of the phone web service, you cannot access the web user interface of the phone running firm-
ware version V84 by default when the web browser only supports TLS 1.0 protocol. But you are allowed to configure the sup-
ported TLS version to use for handshake negotiation between the phone and web browser.
The compatible browsers are Google Chrome V22 or higher, Mozilla Firefox V27 or higher, Internet Explorer 8-10 (if TLS 1.1
or TLS 1.2 is enabled), Internet Explorer 11 and higher (TLS 1.1 and TLS 1.2 is enabled by default), Apple Safari V7 or higher,
and Microsoft Edge.
Try to enable TLS 1.1 and/or TLS 1.2 protocols on web browsers when you cannot access the phone's web user interface
using the lower version browser. If you still cannot access the phone's web user interface when using Internet Explorer, try to
enable TLS 1.1 and disable TLS 1.2, or use other web browsers. Refer to the web resources for more information.
Topics

Supported Cipher Suites

Supported Trusted and Server Certificates
TLS Configuration
Supported Cipher Suites
A cipher suite is a named combination of authentication, encryption, and message authentication code (MAC)
algorithms used to negotiate the security settings for a network connection using the TLS/SSL network protocol.
Yealink phones support the following cipher suites:
DHE-RSA-AES256-SHA
l
DHE-DSS-AES256-SHA
l
AES256-SHA
l
EDH-RSA-DES-CBC3-SHA
l
EDH-DSS-DES-CBC3-SHA
l
DES-CBC3-SHA
l
DES-CBC3-MD5
l
DHE-RSA-AES128-SHA
l
DHE-DSS-AES128-SHA
l
AES128-SHA
l
RC2-CBC-MD5
l
IDEA-CBC-SHA
l
DHE-DSS-RC4-SHA
l
RC4-SHA
l
RC4-MD5
l
RC4-64-MD5
l
EXP1024-DHE-DSS-DES-CBC-SHA
l
115