38
•
UC-PHONE-T & UC-PHONE-T-PLUS
Supplemental Guide – DOC. 8413A
The maximum file size is 5 MB.
•
Set Only Accept Trusted Certificates to ON to have the phone only trust server
certificates that are in the list of trusted certificates. To have the phone trust all
certificates presented by the server, set Only Accept Trusted Certificates to
OFF.
•
Set Common Name Validation to ON to have the phone validate the
CommonName or SubjectAltName of each certificate sent by the server. To skip
validation of these values, set Common Name Validation to OFF.
•
Select the type of certificates in the Trusted Certificates list the phone will use to
authenticate for TLS connection from the CA Certificates drop-down line.
•
To upload a trusted certificate, click inside the Upload Trusted Certificate File
field, select a certificate file (*.pem,*.cer,*.crt and *.der file types), and click
Upload.
Click Confirm to save settings or Cancel to cancel.
Server Certificates
The Server Certificates section manages the list of Transport Layer Security (TLS)
server certificates that the phone sends to authenticate client connections.
Security – Server Certificates
The phone has two types of built-in server certificates: a unique server certificate and a
generic server certificate. Only one additional server certificate can be uploaded to the
phone. The existing server certificate will be overridden by the new one. Trusted
certificates must be *.pem or*.cer file types. The maximum file size is 5 MB.
A unique server certificate is unique to a phone (based on the MAC address) and issued
by the Certificate Authority (CA).