400HD IP Phones Series - Teams Compatible
Administrator's Manual 102 Document #: LTRT-09960
3.5.4 Server Certificate Validation for Secured HTTPS
Communications over SSL
This feature decreases vulnerability to breaches of security. If validation fails after installing
phone firmware, HTTPS communication with Skype for Business and EWS servers are
impacted, including but not restricted to Skype for Business auto-discover, contacts search,
EWS auto-discover, Outlook Calendar, Authorization, etc.
The certificate is verified in two steps:
The Root CA is installed using DHCP option 43, LDAP or the Web interface.
The server’s hostname is validated; for each certificate in the chain, the ‘issuer’ field in
the certificate must match the ‘subject’ field of the issuer (uppermost in the chain)
certificate.
To configure the feature:
Use the table as reference.
Table 3-46: Server Certificate Validation for Secured HTTPS Communications over SSL
Parameter Name Description
security/SSLCertificateErrorsMode
•
Disallow (default) = TLS connection will be rejected
and the phone will not communicate with the server.
• Ignore = Allows backward compatibility though
vulnerability will increase; the phone will proceed
without checking the received certificates and
without any notifications.
To Next Page
Loading...
