User's Manual

460 X.509 Certificates
Table 114
Security policy
SEC_POLICY_ACCEPT
CUST_CERT_ACCEPT
CERT_EXPIRE
VAL_MANUAL_A
VAL_MANUAL_A
LOG_EXPIRE
Table 115 "Security Policy parameters" (page 460) provides a description
of the Security Policy parameters.
Table 115
Security Policy parameters
Security parameter
Description
SEC_POLICY_ACCEPT
This parameter defines how an unsigned Security Policy
(SEC_POLICY) authenticates when downloaded to a phone
with no customer certificate installed. If a customer certificate is
installed on the phone, the Security Policy file must be signed and
this parameter has no effect.
Acceptable values
VAL_MANUAL_A (default)—you must accept a displayed fingerprint
VAL_MANUAL_B —you must enter the correct fingerprint
VAL_NO_MANUAL—always reject unsigned Security Policy files
CUST_CERT_ACCEPT
This parameter defines how an unsigned Certificate file
(USER_KEYS) authenticates when downloaded to a phone
without an installed customer certificate (for example, the first
certificate download only). If a customer certificate was previously
installed on the phone, the Certificate file must be signed and this
parameter has no effect.
Acceptable values
VAL_MANUAL_A (default)—you must accept a displayed fingerprint
VAL_MANUAL_B —you must enter the correct fingerprint
VAL_NO_MANUAL—always reject unsigned Security Policy files
Nortel Communication Server 1000
IP Phones Fundamentals
NN43001-368 05.06 30 April 2010
Copyright © 2003-2010 Nortel Networks. All Rights Reserved.
.