Algo 8198 User Manual page 19

Important: To verify the server you must 'Enable' the 'Validate Server Certificate'
option. This then checks if the certificate that is provided by the server is signed by
any of the CAs included in the list of trusted CAs (used by the Debian infrastructure
and Mozilla browsers). If we receive a certificate signed by any of these CAs, then
that server will be trusted. Certificates can also be manually uploaded using the 'File
Manager'.
The 'Validate Server Certificate' parameter can also be enabled through provisioning:
prov.download.cert = 1
SIP Signalling (and RTP Audio)
SIP signaling is secured by setting 'SIP Transportation' to 'TLS' (under the Advanced
Settings > Advanced SIP tab). Setting it to 'TLS' ensures that the SIP traffic will be
encrypted. The SIP signalling is responsible for establishing the call (the control signal to
start and end the call with the other party), but it does not contail the audio.
For the audio (voice) path, use the setting 'SDP SRTP Offer'. Setting this to 'Optional',
means the SIP call's RTP data will be encrypted (using SRTP) if the other party also
support audio encryption. If the other party does not support SRTP, then the call will still
proceed, but with unencrypted audio. In order to make audio encryption mandatory for
Document 90-00109
2020-09-21
Page 19
Algo Communication Products Ltd
4500 Beedie St Burnaby BC Canada V5J 5L2
www.algosolutions.com
8198 SIP Ceiling Speaker PoE+
(604) 454-3792
support@algosolutions.com