Yealink VS800 - Managing the Server Certificates

| Configuring the Security Features | 201
• thawte Primary Root CA
• -VeriSign Universal Root Certification Authority
• Equifax Secure Certificate Authority
• DigiCert High Assurance EV Root CA
• Equifax Secure Global eBusiness CA-1
• Yealink Equipment Issuing CA
• GeoTrust Primary Certification Authority - G2
• VeriSign Class 1 Public Primary Certification Authority - G3
• VeriSign Class 3 Public Primary Certification Authority - G3
• VeriSign Class 3 Public Primary Certification Authority - G4
• Deutsche Telekom Root CA 2
• Class 1 Public Primary Certification Authority
• Symantec Class 3 Secure Server CA - G4
• Symantec Class 3 Secure Server CA – G
• quickconnect.starleaf.com
• yealinkvc.com
• StarLeaf CA
• Class 1 Public Primary Certification Authority - G2
• Class 2 Public Primary Certification Authority - G2
• Class 3 Public Primary Certification Authority - G2
• Class 4 Public Primary Certification Authority - G2
Note:
The most common used CA Certificates are built in Yealink phones. Due to memory constraints, we
cannot ensure a complete set of certificates. If there is no the desired certificate in the above list, contact
your distributor for the desired one. After that, you can upload the certificate into your phone. For more
information on uploading custom CA certificate, refer to Transport Layer Security (TLS).
Managing the Server Certificates
The system can serve as a TLS server. When clients request a TLS connection with the system, the system sends the
server certificate (device certificate) to the clients for authentication.
About this task
The server certificate contains the default and the custom certificates. You can customize the certificate type sent by
the system to the client for authentication.
• Default Certificates: a unique server certificate and a generic server certificate.
Only if no unique certificate exists, the system may send a generic certificate for authentication.
• Custom Certificates: You can only upload one server certificate to the system. The old server certificate will be
overridden by the new one. The format of the server certificate files must be *.pem or .cer, and the size should be
less than 5M.
Procedure
1.
On your web user interface, go to Security > Server Certs.
2.
Configure and save the following settings: