Yealink T40G Administrator's Guide

Security Features
415
 EXP1024-DES-CBC-SHA
 EDH-RSA-DES-CBC-SHA
 EDH-DSS-DES-CBC-SHA
 DES-CBC-SHA
 DES-CBC-MD5
 EXP1024-DHE-DSS-RC4-SHA
 EXP1024-RC4-SHA
 EXP1024-RC4-MD5
 EXP-EDH-RSA-DES-CBC-SHA
 EXP-EDH-DSS-DES-CBC-SHA
 EXP-DES-CBC-SHA
 EXP-RC2-CBC-MD5
 EXP-RC4-MD5
Supported Trusted and Server Certificates
The IP phone can serve as a TLS client or a TLS server. In TLS feature, we use the terms trusted and server
certificate. These are also known as CA and device certificates.
The TLS requires the following security certificates to perform the TLS handshake:
 Trusted Certificate: When the IP phone requests a TLS connection with a server, the IP phone
should verify the certificate sent by the server to decide whether it is trusted based on the trusted
certificates list. The IP phone has 77 built-in trusted certificates. You can upload 10 custom
certificates at most. The format of the trusted certificate files must be *.pem,*.cer,*.crt and *.der and
the maximum file size is 5MB.
 Server Certificate: When clients request a TLS connection with the IP phone, the IP phone sends
the server certificate to the clients for authentication. The IP phone has two types of built-in server
certificates: a unique server certificate and a generic server certificate. You can only upload one
server certificate to the IP phone. The old server certificate will be overridden by the new one. The
format of the server certificate files must be *.pem and *.cer and the maximum file size is 5MB.
- A unique server certificate: It is unique to an IP phone (based on the MAC address) and
issued by the Yealink Certificate Authority (CA).
- A generic server certificate: It is issued by the Yealink Certificate Authority (CA). Only if no
unique certificate exists, the IP phone may send a generic certificate for authentication.
The IP phone can authenticate the server certificate based on the trusted certificates list. The trusted
certificates list and the server certificates list contain the default and custom certificates. You can specify
the type of certificates the IP phone accepts: default certificates, custom certificates or all certificates.
Common Name Validation feature enables the IP phone to mandatorily validate the common name of
the certificate sent by the connecting server. The Security verification rules are compliant with RFC 2818.

Yealink T40G Specifications

General

SIP Accounts	3
Wall Mountable	Yes
Opus Codec	No
Display	2.3 inch 132x64-pixel graphical LCD
Network	Dual-port Gigabit Ethernet
PoE	Yes
Headset Support	Yes, RJ9 port
Power Adapter	Optional
Voice Codecs	G.722, G.711(A/μ), G.729AB, G.726
Local Phonebook	1000 entries