Yealink T40G Administrator's Guide

Security Features
419
Default
0
Web UI
Account->Register->SIP Server Y->Transport
Parameter
static.security.default_ssl_method
<y0000000000xx>.cfg
Description
It configures the TLS version the IP phone uses to authenticate with the server.
Permitted
Values
0-TLS 1.0 only
3-SSL V23 (automatic negotiation with server. The phone starts with TLS1.2 for
negotiation.)
4-TLS 1.1 only
5-TLS 1.2 only
Default
3
Parameter
static.security.trust_certificates
[2]
<y0000000000xx>.cfg
Description
It enables or disables the IP phone to only trust the server certificates in the Trusted
Certificates list.
Permitted
Values
0-Disabled, the IP phone will trust the server no matter whether the certificate sent by
the server is valid or not.
1-Enabled, the IP phone will authenticate the server certificate based on the trusted
certificates list. Only when the authentication succeeds, will the IP phone trust the
server.
Default
1
Web UI
Security->Trusted Certificates->Only Accept Trusted Certificates
Parameter
static.security.ca_cert
[2]
<y0000000000xx>.cfg
Description
It configures the type of certificates in the Trusted Certificates list for the IP phone to
authenticate for TLS connection.
Permitted
Values
0-Default Certificates
1-Custom Certificates
2-All Certificates
Default
2
Web UI
Security->Trusted Certificates->CA Certificates
Parameter
static.security.cn_validation
[2]
<y0000000000xx>.cfg
Description
It enables or disables the IP phone to mandatorily validate the CommonName or
SubjectAltName of the certificate sent by the server.
Permitted
Values
0-Disabled
1-Enabled
Default
0

Yealink T40G Specifications

General

SIP Accounts	3
Wall Mountable	Yes
Opus Codec	No
Display	2.3 inch 132x64-pixel graphical LCD
Network	Dual-port Gigabit Ethernet
PoE	Yes
Headset Support	Yes, RJ9 port
Power Adapter	Optional
Voice Codecs	G.722, G.711(A/μ), G.729AB, G.726
Local Phonebook	1000 entries