Configuring Security Features
209
This chapter provides information for making configuration changes for the following
security-related features:
Transport Layer Security
Secure Real-Time Transport Protocol
Encrypting Configuration
Files
TLS is a commonly-used protocol for providing communications privacy and managing
the security of message transmission, allowing IP phones to communicate with other
remote parties and connect to the HTTPS URL for provisioning in a way that is designed
to prevent eavesdropping and tampering.
TLS protocol is composed of two layers: TLS Record Protocol and TLS Handshake
Protocol. The TLS Record Protocol completes the actual data transmission and ensures
the integrity and privacy of the data. The TLS Handshake Protocol allows the server and
client to authenticate each other and negotiate an encryption algorithm and
cryptographic keys before data is exchanged.
The TLS protocol uses asymmetric encryption for authentication of key exchange,
symmetric encryption for confidentiality, and message authentication codes for
integrity.
Symmetric encryption
:
For symmetric encryption, the encryption key and the
corresponding decryption key can be told by each other. In most cases, the
encryption key is the same as the decryption key.
Asymmetric encryption: For asymmetric encryption, each user has a pair of
cryptographic keys – a public encryption key and a private decryption key. The
information encrypted by the public key can only be decrypted by the
corresponding private key and vice versa. Usually, the receiver keeps its private
key. The public key is known by the sender, so the sender sends the information
encrypted by the known public key, and then the receiver uses the private key to
decrypt it.
SIP-T4X IP phones support TLS 1.0. A cipher suite is a named combination of
authentication, encryption, and message authentication code (MAC) algorithms used
to negotiate the security settings for a network connection using the TLS/SSL network
protocol. SIP-T4X IP phones support the following cipher suites:
DHE-RSA-AES256-SHA
DHE-DSS-AES256-SHA
Summary of Contents for SIP-T4X
Page 1: ......
Page 10: ...Administrator s Guide for SIP T4X IP Phones x ...
Page 144: ...Administrator s Guide for SIP T4X IP Phones 128 ...
Page 212: ...Administrator s Guide for SIP T4X IP Phones 196 ...
Page 224: ...Administrator s Guide for SIP T4X IP Phones 208 ...
Page 240: ...Administrator s Guide for SIP T4X IP Phones 224 ...
Page 252: ...Administrator s Guide for SIP T4X IP Phones 236 ...
Page 264: ...Administrator s Guide for SIP T4X IP Phones 248 ...
Page 472: ...Administrator s Guide for SIP T4X IP Phones 456 ...
