Aastra Telecom 41-001343-02 manual Description IP Phone UI Aastra Web UI Tion Files, Rity TLS on

			Administrator Level Options
Parameter In	Parameter in	Parameters in Configura-	Description
IP Phone UI	Aastra Web UI	tion Files
NA	NA	sip persistent tls keep alive	Allows you to configure the keep-alive feature for persistent TLS connec-
			tions only. When this feature is configured, the phone will send keep-alive
			pings to the proxy server at configured intervals.
			The keep-alive feature for persistent TLS connections performs the fol-
			lowing functionalities:
			• After a persistent TLS connection is established or re-established, acti-
			vate the keep-alive, which will send CRLF to peer periodically.
			• The phone will retry the connection automatically when a persistent
			TLS connection is down.
			• When a persistent TLS connection is re-established (primary is up or
			primary is down and backup is up), refresh registration of the accounts
			associated with the connection.
			• When a persistent TLS connection to primary is down, switch to
			backup if connection to backup is working.
NA	NA	sip send sips over tls	Allows administrators the ability to manually configure the IP phones to
			use either the SIP or SIPS URI scheme when TLS or persistent TLS is ena-
			bled.
			For more information, see Chapter 6, the section, “Transport Layer Secu-
			rity (TLS)” on page 6-16.
N/A	Root and Intermediate	sips root and intermediate	Allows you to specify the SIP Root and Intermediate Certificate files to use
	Certificates Filename	certificates	when the phone uses the TLS transport protocol to setup a call.
			The Root and Intermediate Certificate files contain one root certificate
			and zero or more intermediate certificates which must be placed in order
			of certificate signing with root certificate being the first in the file. If the
			local certificate is signed by some well known certificate authority, then
			that authority provides the user with the Root and Intermediate Certifi-
			cate files (most likely just CA root certificate).
			This parameter is required when configuring TLS (optional for Persistent
			TLS.)
			Note:
			The certificate files must use the format “.pem”. To create custom certifi-
			cate files to use on your IP phone, contact Aastra Technical Support.
			For more information, see Chapter 6, the section, “Transport Layer Secu-
			rity (TLS)” on page 6-16.
N/A	Local Certificate	sips local certificate	Allows you to specify the Local Certificate file to use when the phone uses
	Filename		the TLS transport protocol to setup a call.
			This parameter is required when configuring TLS (optional for Persistent
			TLS.)
			Note:
			The certificate file must use the format “.pem”. To create specific certificate
			files to use on your IP phone, contact Aastra Technical Support.
			For more information, see Chapter 6, the section, “Transport Layer Secu-
			rity (TLS)” on page 6-16.

41-001343-02 REV04 – 05.2014 3-52