Yealink VC110, Руководство администратора

Страница: 190 / 233

Administrator‘s Guide for Yealink VC110 Video Conferencing Endpoint
180
generic server certificate. You can only upload one server certificate to the
endpoint. The old server certificate will be overridden by the new one. The format
of the server certificate files must be *.pem and *.cer.
-
A unique server certificate: It is installed by default and is unique to a
endpoint (based on the MAC address) and issued by the Yealink Certificate
Authority (CA).
-
A generic server certificate: It is installed by default and is issued by the
Yealink Certificate Authority (CA). Only if no unique certificate exists, the
endpoint may send a generic certificate for authentication.
The endpoint can authenticate the server certificate based on the trusted certificates list.
The trusted certificates list and the server certificates list contain the default and custom
certificates. You can specify the type of certificates the endpoint accepts: default
certificates, custom certificates, or all certificates.
Common Name Validation feature enables the endpoint to mandatorily validate the
common name of the certificate sent by the connecting server.
And Security verification
rules are compliant with RFC 2818.
TLS parameters on the endpoint are described below:
Parameter Description Configuration Method
Transport
Configures the type of transport
protocol for the SIP account.

UDP—provides best-effort
transport via UDP for the SIP
signaling.

TCP—provides reliable
transport via TCP for SIP
signaling.

TLS—provides secure
communication for SIP
signaling.
TLS is available only when the
endpoint is registered with a SIP
server that supports TLS.
Remote Control
Web User Interface
Only Accept
Trusted
Certificates
Enables or disables the endpoint
to only trust the server certificates
in the Trusted Certificates list.
Default: Enabled
Note:
If it is enabled,
the endpoint
will authenticate the server
certificate based on the trusted
Web User Interface