Yealink W53P, Administrator'S Manual

Page: 202 / 264

Security Features
195
Web UI Account->Register->SIP Server Y->Transport
Parameter static.security.default_ssl_method <y0000000000xx>.cfg
Description It configures the TLS version the IP phone uses to authenticate with the server.
Permitted
Values
0 -TLS 1.0 only
3 -SSL V23 (automatic negotiation with the server. The phone starts with TLS1.2 for negotiation.)
4 -TLS 1.1 only
5 -TLS 1.2 only
Default 3
Parameter
static.security.trust_certificates
[3]
<y0000000000xx>.cfg
Description It enables or disables the IP phone to only trust the server certificates in the Trusted Certificates list.
Permitted
Values
0 -Disabled, the IP phone will trust the server no matter whether the certificate sent by the server is valid
or not.
1 -Enabled, the IP phone will authenticate the server certificate based on the trusted certificates list. Only
when the authentication succeeds, will the IP phone trust the server.
Default 1
Web UI Security->Trusted Certificates->Only Accept Trusted Certificates
Parameter
static.security.ca_cert
[3]
<y0000000000xx>.cfg
Description
It configures the type of certificates in the Trusted Certificates list for the IP phone to authenticate for TLS
connection.
Permitted
Values
0 -Default Certificates
1 -Custom Certificates
2 -All Certificates
Default 2
Web UI Security->Trusted Certificates->CA Certificates
Parameter
static.security.cn_validation
[3]
<y0000000000xx>.cfg
Description
It enables or disables the IP phone to mandatorily validate the CommonName or SubjectAltName of the
certificate sent by the server.
Permitted
Values
0 -Disabled
1 -Enabled
Default 0
Web UI Security->Trusted Certificates->Common Name Validation
Parameter
static.security.dev_cert
[3]
<y0000000000xx>.cfg
Description It configures the type of the device certificates for the IP phone to send for TLS authentication.
Permitted
Values
0 -Default Certificates
1 -Custom Certificates
Default 0