Understanding the Certificates Security Settings in Grandstream IP Phones GRP261x series

Understanding Security Settings in Grandstream IP Phones GRP261X

Description

This article briefly describes the Security Settings parameter in Grandstream IP Phones GRP261x series. It is important for debugging when the phones are registered via TLS/SSL.

Validate Server Certificates‘ is mainly used for Web Interface or SSH access.

Check Domain Certificates‘ is to check a domain using the Trusted Domain Name List.

SSLKeyLogFile‘ is for Syslog over TLS.

Validate Certificate Chain‘ is to validate certificates (such as expiry dates, issuer, and signature), it does not affect DNS domain matching.

Figure 1 shows successful certificate validation after adding ‘Trusted Domain Name List under Account > Advanced Settings