Security - Snom m9 DECT Administration Manual

snom m9 DECT Administrator Guide

Security

X.509 Certificates
In Cyberspace, "certificates" are electronic documents that use digital signatures to bind a public key with an
identity and include information such as the name of a person or an organization, their address, and so forth.
The certificate can be used to verify that a public key belongs to an individual, thus establishing the identity of
the certificate owner. We are trying to verify that the device/ID is who they say they are, which is vital for plug
and play when authenticating over the WAN.
Certificate Authorities
A certificate authority (CA) is an entity that issues digital certificates. It is a third party that is trusted by both
the owner of the certificate and the party relying upon the certificate. The m9 phone has a built-in CA that is
owned by snom.com. The IPBX software can use the certificate to be assured that it is talking to a snom m9
base station with MAC address 000413xxxxxxx. The m9 base station automatically performs server identity
verification based on trusted X.509 certificate chains when SSL/TLS is used. Servers that present certificates
signed by CAs unknown to the base are rejected. To deactivate the Server Verification functionality:
1. Log in to the m9 web interface, and select Security.
2. From the Certificate Policy dropdown, select Don't validate certificates.
18
www.InternetVoipPhone.co.uk | sales@internetvoipphone.co.uk | 0800 088 48 46