AASTRA 6700i series, 9143, 9480i, 9480i CT SIP Administrator Guide EN User Manual

Page 842

Advertising
background image

41-001343-01 Rev 03, Release 3.2.2

A-111

Parameter
sips root and intermediate
certificates

Root and Intermediate
Certificates Filename
(in Web UI)

Aastra Web UI

Advanced Settings->TLS Support

Configuration Files

aastra.cfg, <model>.cfg, <mac>.cfg

Description

Allows you to specify the SIP Root and Intermediate Certificate files to use
when the phone uses the TLS transport protocol to setup a call.

The Root and Intermediate Certificate files contain one root certificate and
zero or more intermediate certificates which must be placed in order of
certificate signing with root certificate being the first in the file. If the local
certificate is signed by some well known certificate authority, then that
authority provides the user with the Root and Intermediate Certificate files
(most likely just CA root certificate).

This parameter is required when configuring TLS (optional for Persistent
TLS.)

You can use this parameter in three ways:

To download no certificates

To download a certificate from the original configuration server

To download a certificate from another specified server

To download a specific file, the string value MUST HAVE A FILENAME at
the end of the string. For example:

sips root and intermediate certificates:ftp://admin:[email protected]:50/path/
phonesRootCert.pem

where “path” is the directory and “phonesRootCert.pem” is the filename. If
you do not specify a filename, the download fails.

See examples for each below.

Note: The certificate files must use the format “.pem”. To create custom
certificate files to use on your IP phone, contact Aastra Technical Support.

Format

<file name>.pem

Default Value

Not Applicable

Range

Not Applicable

Advertising