Yealink VC400 Administrator's Manual

Also see for VC120: Getting started Recovery guide Quick guide Administrator's guide User guide

Administrator’s Guide for Yealink Video Conferencing Systems234Certificates on page 278. Server Certificate: When clients request a TLS connection with the system, the systemsends the server certificate to the clients for authentication. The system has two types ofbuilt-in server certificates: a unique server certificate and a generic server certificate. Youcan only upload one server certificate to the system. The old server certificate will beoverridden by the new one. The format of the server certificate files must be *.pem and*.cer.- A unique server certificate: It is installed by default and is unique to a system(based on the MAC address) and issued by the Yealink Certificate Authority (CA).- A generic server certificate: It is installed by default and is issued by the YealinkCertificate Authority (CA). Only if no unique certificate exists, the system may send ageneric certificate for authentication.The system can authenticate the server certificate based on the trusted certificates list. Thetrusted certificates list and the server certificates list contain the default and custom certificates.You can specify the type of certificates the system accepts: default certificates, customcertificates, or all certificates.Common Name Validation feature enables the system to mandatorily validate the commonname of the certificate sent by the connecting server. And Security verification rules arecompliant with RFC 2818.TLS parameters on the system are described below:Parameter Description Configuration MethodTransportConfigures the type of transport protocol.You can configure it for theZoom/Pexip/BlueJeans/Mind/Customplatform, or SIP account separately. UDP—provides best-effort transportvia UDP for the SIP signaling. TCP—provides reliable transport viaTCP for SIP signaling. TLS—provides secure communicationfor SIP signaling. DNS-NAPTR—performs the DNSNAPTR and SRV queries for the servicetype and port if no server port isgiven.Default:For Zoom/Pexip/BlueJeans/Mind/Customplatform, the default value is TCP.For SIP account, the default value is UDP.Remote ControlWeb User Interface