Yealink T5 Series, Administrator'S Manual

Page: 329 / 472

Security Features
323
Parameter static.server_certificates.url <y0000000000xx>.cfg
Description
It configures the access URL of the certificate the phone sends for authentication.
Note : The certificate you want to upload must be in *.pem or *.cer format.
Permitted
Values
URL within 511 characters
Default Blank
Web UI Security->Server Certificates->Load Server Certificates File
Parameter static.server_certificates.delete <y0000000000xx>.cfg
Description It deletes all uploaded server certificates.
Permitted
Values
http://localhost/all
Default Blank
Parameter static.phone_setting.reserve_certs_enable <y0000000000xx>.cfg
Description It enables or disables the phone to reserve custom certificates after it is reset to factory defaults.
Permitted
Values
0 -Disabled
1 -Enabled
Default 0
Parameter
phone_setting.reserve_certs_config.enable
[3]
<y0000000000xx>.cfg
Description
It enables or disables the phone to reserve the trusted and server certificates settings after the phone reset
to factory defaults.
Permitted
Values
0 -Disabled, “static.security.trust_certificates”, “static.security.ca_cert”, “static.security.cn_validation” and
“static.security.dev_cert” will be reset.
1 -Enabled, “static.security.trust_certificates”, “static.security.ca_cert”, “static.security.cn_validation”, “stat-
ic.security.dev_cert” and “phone_setting.reserve_certs_config.enable” will not be reset.
Default 0
[1]
X is the account ID. For T58V/T58A/T56A, X=1-16; for CP960, X=1.
[2]
Y is the server ID. Y=1-2.
[3]
If you change this parameter, the phone will reboot to make the change take effect.
Secure Real-Time Transport Protocol (SRTP)
Secure Real-Time Transport Protocol (SRTP) encrypts the audio streams during VoIP phone calls to avoid interception
and eavesdropping. The parties participating in the call must enable SRTP feature simultaneously. When this feature is
enabled on both phones, the type of encryption to use for the session is negotiated between the phones. This nego-
tiation process is compliant with RFC 4568 .
When you place a call on the enabled SRTP phone, the phone sends an INVITE message with the RTP/RTCP encryption
algorithm to the destination phone. As described in RFC 3711 , RTP/RTCP streams may be encrypted using an AES
(Advanced Encryption Standard) algorithm.
Example of the RTP encryption algorithm carried in the SDP of the INVITE message: