Installing the Root CA Server Certificate on the Polycom Phone


Login to sipXecs with a user that has admin privileges:

  • Navigate to System -> Certificates -> Certificate Authorities.
  • Click on the Root CA Server Certificate to download it. ( or copy it from /etc/sipxpbx/ssl/authorities/ )
  • Copy certificate to /var/sipxdata/configserver/phone/profile/docroot/

Now on the Polycom phone:

  • Press the Menu button, and then select Settings > Advanced.
  • In the Password window, enter your password, and then press the Enter soft key.
  • Do one of the following:
    • If you have a SoundPoint IP or SoundStation IP phone, select Admin Settings > SSL Security > CA Certificates > Install Custom CA Cert.
    • If you have a VVX 1500 phone, select Administration Settings > SSL Security > CA Certificates > Install Custom CA Cert.
  • In the Install Custom CA Certificate window, enter the location of the certificate for your root CA server: "http://FQDN/phone/profile/docroot/certificate_name.crt"  and then press the Enter soft key. The phone will download the certificate and display the MD5 fingerprint.
  • To accept the certificate, press the Accept soft key.
  • Do one of the following:
    • If you have a SoundPoint IP or SoundStation IP phone, press the Back soft key, and then select Configure CA Certs.
    • If you have a VVX 1500 phone, press the Back soft key, and then select Configure CA Certificates.
  • In the Configure CA Certificates window, select the All Certificates check box. This ensures that the custom certificate (the root CA certificate you loaded), as well as the default certificates, are active.