Aastra Telecom 41-001343-02 Phones, Uration files, Signed certificates are in use, Certificates

Administrator Level Options

Parameter In	Parameter in	Parameters in Configuration	Description
IP Phone UI	Aastra Web UI	Files
Cert Validation	Validate Certificates	https validate certificates	Enables or disables the HTTPS validation of certificates on the
			phone. When this parameter is set to 1, the HTTPS client per-
			forms validation on SSL certificates before accepting them.
			Notes:
			• If you are using HTTPS as a configuration method, and use a
			self signed certificate, you must set this parameter to “0”
			(disabled) before upgrading to Release 2.3 or later of the IP
			Phones.
			• If you are using HTTPS and the certificates are not valid or
			are not signed by Verisign, Thawte, or GeoTrust, Comodo,
			Entrust, or CyberTrust, the phones fail to download config-
			uration files.
			• Defining this parameter as "0" (disabled) significantly
			reduces security for the provisioning process to encryption
			only. Validation of the chain-of-trust (i.e. the originator of
			the files) will not be performed if this feature is disabled.
			Therefore, disabling HTTPS validation of certificates is only
			recommended for troubleshooting purposes or when self-
			signed certificates are in use.
			For more information, see Chapter 4, “HTTPS Server Certifi-
			cate Validation” on page 4-36.
Check Expires	Check Certificate Expira-	https validate expires	Enables or disables the HTTPS validation of the expiration of
	tion		the certificates. When this parameter is set to 1, the HTTPS cli-
			ent verifies whether or not a certificate has expired prior to
			accepting the certificate.
			Note:
			If the “https validate expires” parameter is set to enable, the
			clock on the phone must be set for the phone to accept the
			certificates.
			For more information, see Chapter 4, “HTTPS Server Certifi-
			cate Validation” on page 4-36.
Check Hostnames	Check Certificate Host-	https validate hostname	Enables or disables the HTTPS validation of hostnames on the
	names		phone.
			For more information, see Chapter 4, “HTTPS Server Certifi-
			cate Validation” on page 4-36.
N/A	Trusted Certificates	https user certificates	Specifies a file name for a .PEM file located on the configura-
	Filename		tion server. This file contains the User-provided certificates in
			PEM format. These certificates are used to validate peer certif-
			icates.
			Note:
			You must disable the “https validate certificates” parameter
			in order for the phone to accept the User-provided certifi-
			cates.
			For more information, see Chapter 4, “HTTPS Server Certifi-
			cate Validation” on page 4-36.

3-33 41-001343-02 REV04 – 05.2014