Polycom SIP 3.0.2 manual Custom Certificates, Incoming Signaling Validation

Administrator’s Guide SoundPoint IP / SoundStation IP

Configuration changes can performed centrally at the boot server or locally:

Central	Configuration file:	Specify the minimum lengths for the user and administrator
(boot server)	sip.cfg	passwords.
		• For more information, refer to Password Lengths
		<pwd/><length/> on page A-80.
Local	Web Server	None.
	(if enabled)
	Local Phone User	The user and administrator passwords can be changed under the
	Interface	Settings menu or through configuration parameters (refer to Flash
		Parameter Configuration on page A-105). Passwords can consist of
		ASCII characters 32-127 (0x20-0x7F) only.
		Changes are saved to local flash but are not backed up to <Ethernet
		address>-phone.cfgon the boot server for security reasons.

Custom Certificates

	The phone trusts certificates issued by widely recognized certificate
	authorities when trying to establish a connection to a boot server for
	application provisioning. Refer to Trusted Certificate Authority List on page
	C-1.
	In addition, custom certificates can be added to the phone. This is done by
	using the SSL Security menu on the phone to provide the URL of the custom
	certificate then select an option to use this custom certificate.
Note
	For more information on using custom certificates, refer to “Technical Bulletin
	17877: Using Custom Certificates With SoundPoint IP Phones” at
	www.polycom.com/support/voice/ .
	Configuration changes can performed locally:

Local

Local Phone User Interface

The custom certificate can be specified and the type of certificate to trust can be set under the Settings menu.

Incoming Signaling Validation

The three optional levels of security for validating incoming network signaling are:

•Source IP address validation

•Digest authentication

•Source IP address validation and digest authentication

4 - 54