Yealink Yealink SIP-T48G, Administrator'S Manual, Page: 231 / 319

Configuring Security Features
219
Parameters Permitted Values Default
certificate sent by the server is valid or not.
If it is set to 1 (Enabled), the IP phone will authenticate the server certificate based
on the trusted certificates list. Only when the authentication succeeds, the IP phone
will trust the server.
Note: If you change this parameter, the IP phone will reboot to make the change
take effect.
Web User Interface:
Security->Trusted Certificates->Only Accept Trusted Certificates
Phone User Interface:
None
security.ca_cert 0, 1 or 2 2
Description:
Configures the type of certificates in the Trusted Certificates list for the IP phone to
authenticate for TLS connection.
0-Default Certificates
1-Custom Certificates
2-All Certificates
Note: If you change this parameter, the IP phone will reboot to make the change
take effect.
Web User Interface:
Security->Trusted Certificates->CA Certificates
Phone User Interface:
None
security.cn_validation 0 or 1 0
Description:
Enables or disables the IP phone to mandatorily validate the CommonName or
SubjectAltName of the certificate sent by the server.
0-Disabled
1-Enabled
Note: If you change this parameter, the IP phone will reboot to make the change
take effect.
Web User Interface:
Security->Trusted Certificates->Common Name Validation