41-001343-01 Rev 02, Release 3.2.2
4-45
HTTPS Server Certificate Validation
The HTTPS client on the IP Phones support validation of HTTPS certificates. This feature
supports the following:
•
Verisign, GeoTrust, Thawte, Comodo, CyberTrust signed certificates
•
User-provided certificates
•
Checking of hostnames
•
Checking of certificate expiration
•
Ability to disable any or all of the validation steps
•
Phone displays a message when a certificate is rejected (except on check-sync operations)
All validation options are enabled by default.
Certificate Management
Aastra Provided Certificates
The phones come with root certificates from Verisign, GeoTrust, Thawte, Comodo, and
CyberTrust pre-loaded.
User Provided Certificates
The administrator has the option to upload their own certificates onto the phone. The phone
downloads these certificates in a file of .PEM format during boot time after configuration
downloads. The user-provided certificates are saved on the phone between firmware upgrades but
are deleted during a factory default. The download of the User-provided certificates are based on a
filename specified in the configuration parameter,
https user certificates
(
Trusted Certificates
Filename
in the Aastra Web UI; User-provided certificates are not configurable via the IP Phone
UI).
Note:
Certificates that are signed by providers other than Verisign,
GeoTrust or Thwate do not verify on the phone by default. The user can
overcome this by adding the root certificate of their certificate provider to
the use-provided certificate .PEM file.
Summary of Contents for 9000i Series
Page 3: ......
Page 17: ......
Page 67: ......
Page 163: ......
Page 334: ...41 001343 01 Rev 02 Release 3 2 2 5 57...
Page 681: ......
Page 687: ......
Page 981: ......
Page 985: ......
Page 1016: ...41 001343 01 Rev 02 Release 3 2 2 C 31 prgkey5 line 1 list prgkey6 type list prgkey7 type list...
Page 1017: ......
Page 1021: ......
Page 1025: ......
Page 1037: ......