Custom Certificates; Incoming Signaling Validation - Polycom SIP 3.0.2 Administrator's Manual

Administrator's Guide SoundPoint IP / SoundStation IP
Configuration file:
Central
sip.cfg
(boot server)
Web Server
Local
(if enabled)
Local Phone User
Interface

Custom Certificates

Note
Local Phone User
Local
Interface

Incoming Signaling Validation

4 - 54
Configuration changes can performed centrally at the boot server or locally:
Specify the minimum lengths for the user and administrator
passwords.
For more information, refer to
•
<pwd/><length/>
None.
The user and administrator passwords can be changed under the
Settings menu or through configuration parameters (refer to
Parameter Configuration
ASCII characters 32-127 (0x20-0x7F) only.
Changes are saved to local flash but are not backed up to <Ethernet
address>-phone.cfg on the boot server for security reasons.
The phone trusts certificates issued by widely recognized certificate
authorities when trying to establish a connection to a boot server for
application provisioning. Refer to
C-1.
In addition, custom certificates can be added to the phone. This is done by
using the SSL Security menu on the phone to provide the URL of the custom
certificate then select an option to use this custom certificate.
For more information on using custom certificates, refer to "Technical Bulletin
17877: Using Custom Certificates With SoundPoint IP Phones" at
www.polycom.com/support/voice/
Configuration changes can performed locally:
The custom certificate can be specified and the type of certificate to
trust can be set under the Settings menu.
The three optional levels of security for validating incoming network signaling
are:
• Source IP address validation
• Digest authentication
• Source IP address validation and digest authentication
Password Lengths
on page A-80.
on page A-105). Passwords can consist of
Trusted Certificate Authority List
.
Flash
on page