Yealink CP860 SERIES, Administrator'S Manual

Page: 969 / 1126

Configuring Security Features
943
Parameters Permitted Values Default
Description:
Configures the TLS version the IP phone uses to negotiate with the provisioning server
when using TLS transport method to download the boot file and configuration files from
the provisioning server.
0
-use TLS 1.0 to negotiate with the provisioning server
3
-use TLS 1.2 to negotiate with the provisioning server, and it is backward compatible
4
-use TLS 1.1 to negotiate with the provisioning server
5
-use TLS 1.2 to negotiate with the provisioning server
Web User Interface:
None
Phone User Interface:
None
static.security.trust_certificates 0 or 1 1
Description:
Enables or disables the IP phone to only trust the server certificates in the Trusted
Certificates list.
0
-Disabled
1
-Enabled
If it is set to 0 (Disabled), the IP phone will trust the server no matter whether the
certificate sent by the server is valid or not.
If it is set to 1 (Enabled), the IP phone will authenticate the server certificate based on the
trusted certificates list. Only when the authentication succeeds, the IP phone will trust the
server.
Note:
If you change this parameter, the IP phone will reboot to make the change take
effect.
Web User Interface:
Security->Trusted Certificates->Only Accept Trusted Certificates
Phone User Interface:
None
static.security.ca_cert 0, 1 or 2 2
Description:
Configures the type of certificates in the Trusted Certificates list for the IP phone to
authenticate for TLS connection.