Yealink Skype for Business HD IP Phones Administrator Guide 
324 
To configure AES keys via phone user interface: 
1.  Press Menu->Advanced (default password: admin) ->Set AES Key. 
2.  Enter the values in the Common and MAC-Oriented fields. 
AES keys must be 16 characters and the supported characters contain: 0-9, A-Z, a-z and the 
following special characters are also supported: # $ % * + , - . : = ? @ [ ] ^ _ { } ~. 
3.  Press the Save soft key to accept the change. 
802.1X Authentication 
IEEE 802.1X authentication is an IEEE standard for Port-based Network Access Control (PNAC), 
part of the IEEE 802.1 group of networking protocols. It offers an authentication mechanism for 
devices to connect/link to a LAN or WLAN. The 802.1X authentication involves three parties: a 
supplicant, an authenticator and an authentication server. The supplicant is the Skype for 
Business phone that wishes to attach to the LAN or WLAN. With 802.1X port-based 
authentication, the Skype for Business phone provides credentials, such as user name and 
password, for the authenticator, and then the authenticator forwards the credentials to the 
authentication server for verification. If the authentication server determines the credentials are 
valid, the Skype for Business phone is allowed to access resources located on the protected side 
of the network. 
Skype for Business phones support protocols EAP-MD5, EAP-TLS, EAP-PEAP/MSCHAPv2, 
EAP-TTLS/EAP-MSCHAPv2, EAP-PEAP/GTC, EAP-TTLS/EAP-GTC and EAP-FAST for 802.1X 
authentication. 
For more information on 802.1X authentication, refer to
 Yealink 802.1X Authentication. 
Procedure 
802.1X authentication can be configured using the configuration files or locally. 
Configure the 802.1X 
authentication. 
Parameters: 
network.802_1x.mode 
network.802_1x.identity 
network.802_1x.md5_password 
network.802_1x.root_cert_url 
network.802_1x.client_cert_url 
Configure the 802.1X 
authentication. 
Navigate to: 
http://<phoneIPAddress>/servlet?
p=network-adv&q=load