Polycom 1725-11530-200 Rev A1 manual Custom Certificates, Incoming Signaling Validation

Administrator’s Guide - SoundPoint® IP / SoundStation® IPFeatures

	Web Server	None.
	(if enabled)
	Local Phone User	The user and administrator passwords can be changed under
	Interface	the Settings menu or through configuration parameters (see
Local		2.2.2.1.1.3 Setting Flash Parameters from Configuration
		Files on page 16). Passwords can consist of ASCII charac-
		ters 32-127 (0x20-0x7F) only.
		Changes are saved to local flash but are not backed up to
		<Ethernet address>-phone.cfg on the boot server for secu-
		rity reasons.

3.8.2 Custom Certificates

When trying to establish a connection to a boot server for application provisioning, the phone trusts certificates issued by widely recognized certificate authorities. Refer to

6.1Trusted Certificate Authority List on page 173. In addition, custom certificates can be added to the phone. This is done by using the SSL Security menu on the phone to provide the URL of the custom certificate then select an option to use this custom cer- tificate.

Central	Configuration file:	None.
(boot
server)
	Web Server	None.
Local	(if enabled)
	Local Phone User	The custom certificate can be specified and the type of cer-
	Interface	tificate to trust can be set under the Settings menu.

3.8.3 Incoming Signaling Validation

Three optional levels of security are provided for validating incoming network signal- ing:

•source IP address validation

•digest authentication

•both

	Configuration File:	Specify the type of validation to perform on a request-by-
Central	sip.cfg	request basis, appropriate to specific event types in some
(boot		cases.
server)		• For more information, refer to 4.6.1.1.4.3 Request Vali-
		dation <requestValidation/> on page 92.

74 Copyright © 2006 Polycom, Inc.