Aastra Telecom 41-001343-02 manual Transport protocol to setup a call, File name.pem

Operational, Basic, and Advanced Parameters

Parameter –	Configuration Files
sips trusted certificates	aastra.cfg, <model>.cfg, <mac>.cfg
Description	Allows you to specify the Trusted Certificate files to use when the phone uses the TLS
	transport protocol to setup a call.
	The Trusted Certificate files define a list of trusted certificates. The phone’s trusted list must
	contain the CA root certificates for all the servers it is connecting to. For example, if the
	phone is connecting to server A which has a certificate signed by CA1, and server B that
	has a certificate signed by CA2, the phone must have CA1 root certificate and CA2 root cer-
	tificate in its Trusted Certificate file.
	This parameter is required when configuring TLS or Persistent TLS.
	You can use this parameter in three ways:
	• To download no certificates
	• To download a certificate from the original configuration server
	• To download a certificate from another specified server
	To download a specific file, the string value MUST HAVE A FILENAME at the end of the
	string. For example:
	sips trusted certificates: ftp://admin:admin!@1.2.3.4:50/path/phonesTrustedCert.pem
	where “path” is the directory and “phonesTrustedCert.pem” is the filename. If you do not
	specify a filename, the download fails.
	See examples for each below.
	Note:
	The certificate files must use the format “.pem”. To create custom certificate files to use on
	your IP phone, contact Aastra Technical Support.
Format	<file name>.pem
Default Value	Not Applicable
Range	Not Applicable
Example	The following example downloads no trusted certificate file:
	sips trusted certificates:
	The following example downloads the trusted certificate file from the original configura-
	tion server.
	sips trusted certificates: phonesTrustedCert.pem
	The following example uses FTP to download the firmware file “phonesTrustedCert.pem”
	(trusted certificate file) from the “path” directory on server 1.2.3.4 using port 50:
	sips trusted certificates: ftp://admin:admin!@1.2.3.4:50/path/phonesTrustedCert.pem

A-93 41-001343-02 REV04 – 05.2014