Security Features
95
Yealink phones support TLS version 1.0, 1.1 and 1.2. When TLS is enabled for an account, the SIP message of this
account will be encrypted, and a lock icon appears on the LCD screen after the successful TLS negotiation.
Note
: To improve the security of the phone web service, you cannot access the web user interface of the phone running firm-
ware version V84 by default when the web browser only supports TLS 1.0 protocol. But you are allowed to configure the sup-
ported TLS version to use for handshake negotiation between the phone and web browser.
The compatible browsers are Google Chrome V22 or higher, Mozilla Firefox V27 or higher, Internet Explorer 8-10 (if TLS 1.1
or TLS 1.2 is enabled), Internet Explorer 11 and higher (TLS 1.1 and TLS 1.2 is enabled by default), Apple Safari V7 or higher,
and Microsoft Edge.
Try to enable TLS 1.1 and/or TLS 1.2 protocols on web browsers when you cannot access the phone's web user interface
using the lower version browser. If you still cannot access the phone's web user interface when using Internet Explorer, try to
enable TLS 1.1 and disable TLS 1.2, or use other web browsers. Refer to the web resources for more information.
Topics
Supported Cipher Suites
Supported Trusted and Server Certificates
TLS Configuration
Supported Cipher Suites
A cipher suite is a named combination of authentication, encryption, and message authentication code (MAC)
algorithms used to negotiate the security settings for a network connection using the TLS/SSL network protocol.
Yealink phones support the following cipher suites:
l
DHE-RSA-AES256-SHA
l
DHE-DSS-AES256-SHA
l
AES256-SHA
l
EDH-RSA-DES-CBC3-SHA
l
EDH-DSS-DES-CBC3-SHA
l
DES-CBC3-SHA
l
DES-CBC3-MD5
l
DHE-RSA-AES128-SHA
l
DHE-DSS-AES128-SHA
l
AES128-SHA
l
RC2-CBC-MD5
l
IDEA-CBC-SHA
l
DHE-DSS-RC4-SHA
l
RC4-SHA
l
RC4-MD5
l
RC4-64-MD5
l
EXP1024-DHE-DSS-DES-CBC-SHA
l
EXP1024-DES-CBC-SHA
l
EDH-RSA-DES-CBC-SHA
l
EDH-DSS-DES-CBC-SHA
l
DES-CBC-SHA
l
DES-CBC-MD5
l
EXP1024-DHE-DSS-RC4-SHA
l
EXP1024-RC4-SHA
l
EXP1024-RC4-MD5
l
EXP-EDH-RSA-DES-CBC-SHA
l
EXP-EDH-DSS-DES-CBC-SHA
l
EXP-DES-CBC-SHA
Summary of Contents for One Talk CP960
Page 1: ......