Enabling TLS/SIPS

IPVoice Supports three different types of SIP transport UDP, TCP and TLS.

TLS, also known as Transport Layer security is used to securely transport SIP messages from SIP devices to the IPVoice platform. When TLS is enabled, calls will be end to end encrypted, this makes it impossible to interpret the messaging in the case of the packets being intercepted mid transit.

Because of this TLS is used when PCI / DSS compliance is required.

Alongside TLS, IPVoice also supports SRTP (secure real time protocol), this is a similar method for encrypting the media of a call.

TLS is enabled by default platform side and is enabled by default for the IPVoice app softclients, this can be seen on the Monitor page by the (TLS) beside the contact information.

Enabling TLS on Yealink handsets:

TLS configuration is done in the handset’s UAD. In the UAD, find the “Transport Options” section and change the value to “2” for TLS.

A couple of lines further down are the strings to enable SRTP and to setup the certificates, these just need to be uncommented (remove the # from infront of the strings)

Once the phone has been factory reset and new UAD has been loaded, the TLS registration can be seen on the Monitor page by the (TLS) beside the contact information.

Have more questions? Submit a request