Yealink phones won't connect to server with approved TLS cert

[seantp]

I'm using a cert issued by Comodo RSA Domain Validation Secure Server CA, which is on Yealinks list of trusted certificates. However, I still have to go to phones and manually disable Only Accept Trusted Certificates. It's very frustrating and I've gone to lengths of customizing the yealink config files to disable that setting. It still requires the initial disable to even provision new phones

I don't really remember having to install the root certificate on the server and wonder if adding that to the cert chain would help.

 

[eddv123]

Hi seantp,

This should not be required anymore but was with an older version of firmware (for remote STUN extensions at the very least). Please confirm what Yealink model and FW version you are using.

 

[seantp]

My remote worker is using a
T46S
Firmware Version
66.82.0.20

Hardware Version
66.0.0.128.0.0.0

I'm using
T48G

Firmware Version 35.82.0.20
Hardware Version 35.1.0.2.1.0.0

For as long as I have been using this combination of 3CX and yealink phones. The first step I take is disabling "Only Accept Trusted Certificates" so I could then provision the device successfully.