400HD IP Phones Series - Teams Compatible
Administrator's Manual 126 Document #: LTRT-09960
4.8 Configuring Skype for Business Server for SRTP /
TLS
This section shows how to configure Microsoft Skype for Business Server for Secure Real-
Time Transport Protocol (SRTP) / TLS, if it isn't configured already.
To configure Microsoft Skype for Business Server for SRTP/TLS:
1. Open the Microsoft Skype for Business Server management interface.
2. Configure a 'Route' on the Skype for Business Server.
3. Open the server's Edit Trunk Configuration – Global screen.
Figure 4-1: Skype for Business Server - Edit Trunk Configuration - Global
4. Select the Enable media bypass option.
5. Select one of the following options from the the 'Encryption Support Level’ dropdown:
• Required - SRTP encryption will be used to help protect traffic between the
Mediation Server and the gateway or private branch exchange (PBX).
• Optional - SRTP encryption will be used if the service provider or equipment
manufacturer supports it.
• Not Supported - SRTP encryption is not supported by the service provider or
equipment manufacturer and will therefore not be used.
The option selected depends on customer configuration / requirements.
• If you set ‘Encryption Support Level’ to Optional, make sure the encryption is
enabled in PowerShell (https://support.microsoft.com/en-us/kb/2761579):
Get-CsMediaConfiguration |Set-CsMediaConfiguration -
EncryptionLevel SupportEncryption
Identity : Global
EnableQoS : False
EncryptionLevel : SupportEncryption
EnableSiren : False
MaxVideoRateAllowed : VGA600K