Snom m9 DECT Administrator's Manual
m9 DECT
m9 DECT Administrator Guide
Copyright © 2011 snom technology, Inc.
All rights reserved.
is document is supplied by snom technology. No part of this document may be reproduced, republished or
retransmitted in any form or by any means whatsoever, whether electronically or mechanically, including, but
not limited to, by way of photocopying, recording, information recording or through retrieval systems, without
the express written permission of snom technology. snom technology reserves the right to revise this document
and make changes at any time and without the obligation to notify any person and/ or entity of such revisions
and/or changes.
Product specications contained in this document are subject to change without notice.
Safety Precautions
Safety Precautions
Please read these precautions and the instructions on setting up and using the base and the phone thoroughly
before using the device. Do not give the device to third parties without this guide accompanying the device.
See also separate general safety information and country-specific safety and warranty information for the USA,
Australia, and New Zealand.
Power Supplies/Adapters, Rechargeable Battery
Use only the power converters (AC/DC adapters) delivered with the base station and the phone or those
power supplies expressly recommended by snom (“Power Supplies/Adapters” on page 79). Other power
supplies may damage or even destroy the device(s). Use only the rechargeable battery pack delivered with the
handset or those rechargeable battery packs expressly recommended by snom (see “Rechargeable Batteries”
on page 79).
Placement of Base, Charger, Cables, and Cords
Avoid placing the devices’ cables and cords where people may trip over them. Avoid placing the
cables and cords where they may be exposed to mechanical pressure as this may damage them. If
the power supply cord or the plug is damaged, disconnect the device and contact qualified service
personnel.
Base station, chargers, handsets, power adapters, and cables are for indoor installation with a tem-
perature range between +5°C and +45°C. Not for outdoor installation!
Do not install product in rooms with high humidity (for example, in bathrooms, laundry rooms, damp
basements). Do not immerse product in water and do not spill or pour liquids of any kind onto or into
any parts of it.
Do not install product in surroundings at risk for explosions and do not use the handset in such sur-
roundings (paint shops, for example). Do not use the phone if you smell gas or other potentially
explosive fumes!
Medical devices might be adversely affected. Please consider the technical ramifications when in-
stalling the devices in a doctor’s office, for example.
FOR THE USA: Do not use near medical equipment or if you have a pacemaker.
Health Precautions
Implanted Pacemakers
FOR THE USA: Do not use if you have a pacemaker.
Do not use if you have an implanted pacemaker unless the pacemaker manufacturer’s directions
expressly permit the use of devices emitting pulsating radio frequency signals. Always follow the
manufacturer’s directions!
iii
snom m9 DECT Administrator Guide
Recommended MINIMUM distance to the handset: 20 cm (7.9”).
Do not carry the handset in a breast pocket.
Hold the handset to the ear opposite the medical device to minimize the potential for interference.
Turn the handset off immediately if there is any reason to suspect that interference is taking place.
Hearing-Related
Do not hold the loudspeaker at the back of the handset against your ear when the phone is ringing or when
speakerphone is switched on. Danger of serious, irreversible damage to your hearing!
If you are wearing a hearing aid, please note that the handset may cause an annoying background noise.
Medical Devices
Operation of any equipment emitting radio frequency signals may interfere with the functionality of inadequately
shielded medical devices. Consult a physician or the manufacturer of the medical device to determine if they
are adequately shielded from external RF energy or if you have any other questions concerning this topic.
Switch off your device in health care facilities when signs posted in these areas instruct you to do so. Hospitals or health care facilities may be using equipment that could be sensitive to external RF energy.
Implanted Medical Devices
Manufacturers of medical devices recommend that a minimum distance of 20 centimeters (7.8 inches) should
be maintained between a wireless device and an implanted medical device, such as pacemakers or cardioverter defibrillators, to avoid potential interference with the medical device. Persons who have such devices should:
Always keep the wireless device more than 20 centimeters (7.8 inches) from the medical device when
the wireless device is turned on.
Avoid carrying the wireless device in a breast pocket.
Hold the wireless device to the ear opposite the medical device to minimize the potential for interfer-
ence.
Turn the wireless device off immediately if there is any reason to suspect that interference is taking
place.
Read and follow the directions of the medical device‘s manufacturer.
If you have any questions about using your wireless device with an implanted medical device, consult your
health care provider.
iv
Safety Precautions
Additional Safety Information
Small Children
Your device and its enhancements may contain small parts. Keep them out of the reach of small children.
Operating Environment
Remember to follow any special regulations in force in any area, and always switch off your device when its use
is prohibited or when it may cause interference or danger. Use the device only in its normal operating positions.
Do not place credit cards or other magnetic storage media near the device, because information stored on
them may be erased.
SELV (Safety Extra Low Voltage) Compliance
Safety status of input/output connections comply to safety extra-low voltage (SELV) requirements.
Warning: To avoid electric shock, do not connect SELV circuits to telephone-network voltage (TNV) circuits. LAN ports contain SELV circuits, and PSTN ports contain TNV circuits. Some LAN and PSTN ports
both use RJ-45 (8P8C) connectors. Use caution when connecting cables.
Potentially Explosive Environments
Switch off your device when in any area with a potentially explosive atmosphere and obey all signs and instructions. Sparks in such areas could cause an explosion or fire resulting in bodily injury or even death. Switch off
the device at refuelling points such as near gas pumps at service stations. Observe restrictions on the use of
radio equipment in fuel depots, storage, and distribution areas; chemical plants; or where blasting operations
are in progress. Areas with a potentially explosive atmosphere are often but not always clearly marked. They
include below deck on boats, chemical transfer or storage facilities, vehicles using liquefied petroleum gas, and
areas where the air contains chemicals or particles such as grain, dust, or metal powders.
Sensitive Electronic Equipment
The current state of research concludes that operational DECT phones normally do not adversely affect electronic equipment. Nevertheless, you should take some precautions if you want to operate DECT phones in the
immediate vicinity of such equipment like sensitive laboratory equipment. Always keep a minimum distance of
10 cm (3.94“) to the equipment even when the phone is in standby.
Electrical Surges
We recommend the installment of an AC surge arrester in the AC outlet to which this device is connected to
avoid damage to the equipmen t caused by local strikes of lightening or other electrical surges.
v
snom m9 DECT Administrator Guide
Cleaning and Disposal
Cleaning
Use an anti-static cloth. Please avoid water and liquid or solid cleaning products as they might damage the
surface or internal electronics of the base, charger, and handset.
Disposal of Phone
This product is subject to European Directive 2002/96/EC and may not be disposed of
with general household garbage.
If you do not know where you may dispose of the device at the end of its lifespan, contact
your municipality, your local waste management provider, or your seller.
Disposal of Battery
This battery is subject to European Directive 2006/66/EC and may not be disposed of with
general household garbage.
If you do not know where you may dispose of the battery at the end of its lifespan, contact
your municipality, your local waste management provider, or your seller. Do not incinerate
batteries.
Countries Outside the European Union
Disposal of electrical and electronic products in countries outside the European Union should be done in line
with local regulations. Please contact local authorities for further information.
vi
Contents
Safety Precautions ................................................................................... iii
Cleaning and Disposal............................................................................... vi
About m9 DECT ...................................................................................... 1
Equipment Contents ................................................................................. 2
SECTION I: Administrator Functions
Installation .............................................................................................. 3
Finding the IP Address of the Base Station ..................................................... 5
Setting up the Handsets for Use .................................................................. 6
Example Setups ......................................................................................11
Network Settings ....................................................................................16
Security ................................................................................................18
snom m9 DECT Administrator Guide
System Status ........................................................................................24
Base Station Firmware Update. ...................................................................28
Handset Firmware Update .........................................................................30
Auto Configuration and Firmware Update ......................................................32
Dial Plans .............................................................................................35
LDAP ...................................................................................................39
IPv6 and m9 DECT .................................................................................42
SECTION II: The m9 in Action
Handset Overview ...................................................................................45
Idle Screen Display Symbols ......................................................................46
Setting the Date and Time .........................................................................49
Basic Calling .........................................................................................51
Using Voicemail ......................................................................................52
Hands-Free Speaker Mode ........................................................................52
Speed Dialing ........................................................................................54
Transferring Calls ....................................................................................54
Conferencing .........................................................................................55
Forwarding Calls/Redirection .....................................................................56
Do Not Disturb .......................................................................................57
Setting the Alarm Clock ............................................................................58
Intercom ...............................................................................................59
vii
snom m9 DECT Administrator Guide
Call Waiting Indication ..............................................................................60
Calling and Called Party ID ........................................................................61
CLIP/CLIR ............................................................................................62
Call History ...........................................................................................63
Address Book/Directory............................................................................63
vCards .................................................................................................64
Caller Picture Display ...............................................................................67
Using the Stopwatch ................................................................................69
Using the Calculator ................................................................................69
Using the Notepad ..................................................................................70
Setting an Appointment (Calendar) ..............................................................70
RSS Feeds ........................................................................................... 72
Customizing the Handset .......................................................................... 73
Action URLs ..........................................................................................77
Appendix 79
viii
About m9 DECT
About m9 DECT
The snom m9 is the next-generation DECT (Digital Enhanced Cordless Technology) hand-held that empowers
users with the convenience of wireless communication along with the widely accepted benefits and features of
Voice over IP (VoIP) telephony.
The DECT-based snom m9 provides interference-free communication by making use of the dedicated DECT
frequency band. In addition, the snom m9 delivers the typical benefits of the DECT world such as high standby
time and superior speech quality in addition to Internet application integration, thus providing a decisive edge
over WLAN hand-helds.
DECT
IP-PBX
SIP Signaling
Voice Media
Base Station
The working range of the snom m9 access point is roughly 50 meters indoors and approximately 300 meters
outdoors (depending on the actual topology of a building and/or outdoor premise).
1
snom m9 DECT Administrator Guide
2
Equipment Contents
The m9 DECT phone is shipped with the following equipment and supplies:
1
2
5
3
4
6
7
8
9
1
DECT/GAP Base Station
2
DECT/GAP Handset
3
Handset Belt Clip
4
3.7V Lithium-Ion Rechargeable Battery
5
Handset Charger
6
One CAT5 Ethernet cable
7
One Interchangeable Power Adapter for Base Station
8
One Power Adapter for Handset
9
Four Plug Adapters for Base Station
— U.K. (three flat pins)
— European (two round pins)
— Australian (two flat pins)
— U.S. (two flat pins)
snom
rechargeable
Lithium-Ion
battery
Installation
SECTION I: Administrator Functions
Installation
Warning: Use only the batteries approved by snom technology, as this may lead to leakage, fire, explosion, or other dangerous situations. Use the battery only for its intended
purpose. Do not short-circuit the battery. Short-circuiting the terminals may damage the
battery or the connecting object. Do NOT use a damaged charger or battery. Using a
damaged battery may cause it to explode.
Handset Preparation
The base station, chargers, handsets, power adapters, and cables are designed for indoor installation with a
temperature range between +5°C and 45°C (41°F and 113°F). They are not intended for outdoor installa-
tion!
1. Lift off the battery cover (image A).
2. Insert the battery pack with the electrodes in the top left corner. Replace the cover (image B).
Note: Do not place or store the battery, whether inside or outside the handset, in the immediate vicinity
of open fire or other heat sources. Leaving the battery in hot or cold places will reduce its capacity and
lifetime. For short-term storage, store batteries in a dry location with low humidity, no corrosive gases,
and at a temperature range of -20° C to 45° C (-4° F to 113° F). For long-term storage, store at temperature ranges between +10° C and +30° C (50° F to 86° F).
3. Connect the 5.9 V power supply of the charger to the wall outlet, then connect it to the charger.
4. Place the handset into the charging cradle (image C).
A B
C
3
snom m9 DECT Administrator Guide
Handset Overview
Belt clip
Volume adjust key+-
Adjust volume of:
Ringer (when call is ringing)
Speaker (when in call)
Speakerphone key (on/off)
Headset jack connector 2.5 mm
Speakerphone
Battery cover
Recharging the Battery
The handset is powered by a rechargeable battery. The full performance of a new battery is achieved only after
two or three complete charge and discharge cycles. The battery will eventually wear out even though it can
be charged and discharged hundreds of times. If the phone is left unused, a fully charged battery will lose its
charge over time. If the battery is completely discharged, it may take a few minutes before the charging indicator appears on the display.
Charge batteries within an ambient temperature range of 0° C to 40° C (32° F to 104° F). A device with a hot
or cold battery may temporarily be non-working, even when the battery is fully charged. Avoid overcharging.
Repeated overcharging can lead to deterioration in battery performance. Never attempt to charge the battery
with reversed polarity as this may cause the gas pressure inside the battery to rise and lead to leakages.
Setting up the Base Station
The base station and handsets are designed for indoor installation with a temperature range between +5°C
and +45°C (between 41°F and 113°F). They are not intended for outdoor installation!
DECT handsets have a range of around 300 feet from the base station.
1. Once the handset is ready for use, insert one end of the Ethernet cable into the redundant network
port of the base station, then connect the other end of the Ethernet cable to a LAN port in your network
(e.g., switch, router, etc.).
Warning: Safety status of input/output connections comply to safety extra-low voltage
(SELV) requirements. To avoid electric shock, do not connect SELV circuits to telephonenetwork voltage (TNV) circuits. LAN ports contain SELV circuits, and PSTN ports contain
TNV circuits. Some LAN and PSTN ports both use RJ-45 (8P8C) connectors. Use caution when connecting cables.
4
Finding the IP Address of the Base Station
5
2. Connect the 5V power converter to the wall outlet first, THEN to the base station.
NET
RESET
5V DC
Power
connector
Reset
button
Net port
The power indicator lights and the base station begins to initialize.
3. Once the base station has booted up, the Call LED on the face of the base station will begin blinking,
indicating that the base station is waiting for a handset registration.
Finding the IP Address of the Base Station
You can get the IP address of the base station either from the handset itself or via HTTP.
Handset
1. Press the center navigation button, followed by g System Info, then OK.
The IP address of the base station is displayed on the screen. Make a note of it (image A below).
2. Using the bottom edge of the navigation wheel, page down twice. Make a note of the handset ID (im-
age B). Do not include the “h.”
Note: If DHCP failed, the IP address, netmask, and IP gateway of the base station will need to be
assigned from the handset. To apply the settings, the base must be rebooted. After reboot, the base
should be reachable at the IP address assigned through the handset.
snom m9 DECT Administrator Guide
HTTP
HTTP allows you to access the m9 base station without looking at the handset. This is helpful in cases where
the handset has problems registering to the base station or when the handset is simply not available.
Note: The steps described here assume that you have an operating system that supports IPv6 (Windows 7,
Vista, Mac, Linux) and the device is in the same LAN as the computer being used to access it.
1. Find the MAC address of the base. The MAC address of the base station can be found on the label at
the back of the m9 base station. For example, a MAC address could be 00:04:13:30:12:34.
2. Open a web browser and enter the following address: http://[fe80::204:13ff:fe30:1234],
where the 1234 corresponds to the last four digits of the MAC address from Step 1. You should see
the login screen of the m9.
3. Log in using the default username and password (admin and password).
4. Navigate to the status web page. The IP address of the phone is listed as shown below.
Note: The IPv6 interface requires an upgraded Linux Kernel on the device. If the IPv6 interface is not working,
upgrade the device to the latest Linux Kernel which can be found at http://provisioning.snom.com/download/
fw/m9-os.bin.
Setting up the Handsets for Use
Registering the Handsets to the Base
1. Press (red phone key). The display will say “Searching for Base.” Once the handset has found the
base station, it will display the PIN prompt.
2. Enter the default PIN of 0000.
3. Press OK.
6
Setting up the Handsets for Use
Note: If the handset fails to register automatically, a manual registration can also be performed. Instructions are as follows:
1. Press the center navigation button, followed by g Handset g Register handset g
Base 1.
2. Enter your PIN, and press OK to register the handset.
Once the handset has registered with the base, the idle screen is displayed.
4. Repeat these steps for each handset.
Setting the Server Type
This section allows you how to set the server type and specify SIP settings (instructions for Microsoft® Lync
2010 are also provided).
1. From the m9 web interface, click SIP from the top navigation bar:
2. Configure the settings as detailed below:
Server Type: Server profiles provide support for non-standard functionality of some of the most
popular VoIP platforms in the market, enabling snom m9 product ease of use and integration with
third-party IPBXs. Server-type supported platforms include:
Microsoft Lync 2010 Asterisk Telepo BCS
Cisco Call Manager snom ONE Advoco NetPBX
Broadsoft Metaswitch Avaya CM
7
snom m9 DECT Administrator Guide
Note: TAHI (Broken Register) performs the same function as Broken Registrar on the snom 3xx.
RTP Encryption: Enables media encryption on the m9 (toggles between SAVP/AVP). Enable this
setting if Media Encryption (SRTP) functionality is desired
Offer ICE: Allows the snom m9 to offer ICE candidates for outgoing calls (Microsoft Lync func-
tionality)
Dial Plan String: See “Dial Plans” on page 35.
Proposed Expiry (sec): SIP registration expiry in seconds.
DTMF via SIP INFO: Enables DTMF for IVR function with SIP INFO method.
Conference URI: URI for server hosted call conference.
3. Click Save.
Assigning Handsets to Extensions
This section shows you how to register an extension to the m9 handset (instructions for Microsoft® Lync 2010
are also provided). Registering a handset to an extension is done from the m9 web interface. To access the
interface, the IP address of the base station is required (see Page 5).
1. Enter the base station’s web interface by opening a browser window and entering the IP address of
the base station (e.g., http://192.168.4.38), then press Enter.
2. Log in using the default login credentials:
Default user name: admin
Default password: password
8
Important: The device will be inaccessible if both the
DECT PIN and the Web portal password of the snom
m9 are forgotten. Under these circumstances, the
base station can be reverted back to factory default by
dialing the recovery code **0000** from any registered handset.
Setting up the Handsets for Use
3. Click Identity 1 from the left navigation panel, and configure the following parameters (see next page).
Note: An Identity on the device corresponds to a single a user. Each identity provides its own preferences and behavior desired by the individual user.
Identity active: Set to on.
Display Name: This name will be displayed on the handset, e.g., John Smith.
Account: PBX extension number.
Registrar: IP address or domain name of the PBX.
Outbound Proxy: IP address or domain name of the PBX. When using a domain name, prefix the
domain name with sip: (e.g., sip:mycompany.com).
Authentication Name: If no authentication name is provided, the Account setting is used.
Password: Use the SIP password that belongs with the extension that was configured in the IPBX
or SIP server.
Microsoft® Lync 2010 Integration
Disclaimer: The Microsoft Lync 2010 Server functionality of the snom m9 is still under
development, and snom cannot guarantee functionality in all user environments.
Identity active: Set to on.
Display Name: This name will be displayed on the handset, e.g., John Smith
Account: The user's OCS usermame, e.g., John.Smith.
Registrar: The OCS domain, e.g., company.com.
Outbound Proxy: The server address, e.g., sip:ocs.company.com
Note: It is also possible to specify the port and transport layer: e.g.,
sip:ocs.company.com:5060;transport=tcp (Use TCP/Port 5060)
sip:ocs.company.com:5061;transport=tls (Use TLS/Port 5061)
Authentication Name: Domain name\account name (e.g., mycompany\John.
Smith).
Password: Use the password that belongs with the extension.
9
snom m9 DECT Administrator Guide
4. Click Handsets, then select the handset ID from the Handset ID (IPUI) dropdown list. Click Save.
The user’s name will be displayed on the phone display. This is considered the “idle display.”
5. Repeat these steps for each handset.
Note: Each handset can be assigned up to nine SIP accounts (identities). When there is only one
handset per account, that handset will use the same account for incoming and outgoing calls. When
one handset has been assigned to multiple accounts, the same handset will ring whenever a call comes
in on any of the SIP accounts for incoming calls. For outgoing calls, the user will need to select the
Outgoing SIP account by using the “Allow Line Switching” setting (shown below), which allows users to call numbers with an <index>*Number format (e.g., to call 499 from Identity 3, the user will dial
3*499).
10
Example Setups
Verifying the Registration(s)
1. Log in to the m9 web interface, and click the Status from the left navigation bar.
2. Click Registration. A 200 Ok indicates a successful registration. The “(90 s),” as shown in the image
below, indicates that the registration will be complete in 90 seconds. Other possible values include
“408 Timeout,” which indicates the user could not be found in time, and “409 Authentication Required,”
which indicates a password issue.
Example Setups
Single SIP Account with Multiple Handsets
1. Configure the SIP account on the base station as shown below:
11
snom m9 DECT Administrator Guide
2. Click the Handsets tab, and assign all registered handsets to the Identity.
Each handset should reflect the display name (or username) of the configured account.
Incoming calls to the SIP account will alert all handsets, and outgoing calls can be placed from any
handset.
12
Example Setups
Multiple SIP Accounts with a Single Handset
1. Use Identity 1-9 for configuring all available SIP accounts one by one on the base station as shown
below:
2. Click the Handsets tab of each Identity and assign the registered handset to the Identity.
Each Identity should have the same Handset IPUI assigned to it.
13
snom m9 DECT Administrator Guide
3. Click the Behavior tab of each Identity, and set the Allow Line Switching setting to on as shown
below:
The handset displays the display name/username of the first registered Identity in order of priority 1-9.
Incoming calls to any of the configured SIP accounts will alert the handset.
For outgoing calls, use the dial format of <Identity Index> * <Number> for selecting an outgoing line:
14
Example Setups
Multiple SIP Accounts with Multiple Handsets
1. Use Identity 1-9 for configuring all available SIP accounts on the base station as shown below:
2. Click the Handsets tab of each Identity, and assign a unique handset IPUI to each Identity.
3. Each handset should reflect the display name/username of the Identity to which it has been assigned:
15
snom m9 DECT Administrator Guide
Incoming calls to any of the configured SIP accounts will alert the corresponding handset for that SIP
account
Outgoing calls from a handset must be placed from the SIP account to which it has been assigned.
Network Settings
To specify the network settings for your system, click Network from the left navigation panel.
Phone Name: This is the device “Network Host name” as seen in DHCP requests.
Asset ID: This specifies the llpd_asset_id parameter.
DHCP: The on/off options correspond to your network configuration (DHCP or static). Default is
DHCP.
IP Address: This is the static IP address of the device, if DHCP is switched off.
16
Network Settings
Netmask: This is the netmask for the network, if DHCP is switched off.
IP Gateway: This is the default gateway of the network, if DHCP is switched off.
DNS Server: Multiple DNS servers can be used for DNS redundancy. If one of them fails, a backup
will be available.
DNS Domain: This is the DNS domain of the device, if DHCP is switched off.
NTP Server: NTP Time Server IP Address of hostname.
VLAN/ID: VLAN ID is the identification of the VLAN, which is basically used by the standard 802.1Q.
It has 12 bits and allows the identification of 4096 VLANs. Possible values range from 0 to 4095.
VLAN Priority: VLAN Priority lets the user assign a priority to outbound packets containing the speci-
fied VLAN-ID (VID). Possible values range from 0 to 7.
Provisioning Server: This field takes an auto configuration URL (links to a configuration XML file)
Settings refresh timer: This field indicates the number of seconds after which the m9 will refresh its
settings from the setting server periodically (0 = don’t refresh).
SIP client port: Allows the m9 to bind the device to a fixed SIP UDP port (e.g., 5060). By default, the
m9 selects a random UDP port for SIP signaling.
RTP Type of Service (ToS/Diffserv): Enables the m9 to support quality of service (QoS) for RTP traf-
fic in the network via Diffserv.
SIP Type of Service (ToS/Diffserv): Enables the m9 to support quality of service (QoS) for SIP traffic
in the network via Diffserv.
Allow Check-Sync: Allows reboot/re-sync with SIP NOTIFY.
STUN server: STUN (Simple Traversal of UDP through NAT) server and port.
STUN refresh interval in seconds: Interval for STUN refresh.
NAT Traversal
NAT is typically used by a router or firewall to allow devices that are on a LAN (Local Area Network) and have
private IP addresses to share a single, public IP address. To maintain the session, the NAT’ed snom m9 behind
the firewall must keep sending messages to keep the session open. These messages are called “NAT Keep
Alive” messages. The snom m9 provides the following provisionable settings for NAT Keep Alive:
outbound_method: crlf or stun
outbound_tcp: Refresh interval in seconds for TCP connections (default is 60)
outbound_udp: Refresh interval in seconds for UDP connections (default is 20)
17
snom m9 DECT Administrator Guide
Security
X.509 Certificates
In Cyberspace, “certificates” are electronic documents that use digital signatures to bind a public key with an
identity and include information such as the name of a person or an organization, their address, and so forth.
The certificate can be used to verify that a public key belongs to an individual, thus establishing the identity of
the certificate owner. We are trying to verify that the device/ID is who they say they are, which is vital for plug
and play when authenticating over the WAN.
Certificate Authorities
A certificate authority (CA) is an entity that issues digital certificates. It is a third party that is trusted by both
the owner of the certificate and the party relying upon the certificate. The m9 phone has a built-in CA that is
owned by snom.com. The IPBX software can use the certificate to be assured that it is talking to a snom m9
base station with MAC address 000413xxxxxxx. The m9 base station automatically performs server identity
verification based on trusted X.509 certificate chains when SSL/TLS is used. Servers that present certificates
signed by CAs unknown to the base are rejected. To deactivate the Server Verification functionality:
1. Log in to the m9 web interface, and select Security.
2. From the Certificate Policy dropdown, select Don’t validate certificates.
18
Security
Note: The snom m9 is also able to present its X.509 Certificate for Client Identity Verification (CIV), a critical
risk mitigation measure that gives all participants confidence about who they are dealing with. For the Client/
Server verification to function, the validation server must have a valid certificate with a domain name as the CN.
Also, the same domain name must be provided to the snom m9 as the SIP server or auto-configuration server.
To view the trusted root CAs on the base, click Status > Network.
Client Certificates
Each snom m9 base station comes equipped with a unique X.509 certificate signed by snom CA.
19
snom m9 DECT Administrator Guide
These client certificates are used by the snom m9 to provide servers proof-of-identity based on the
MAC address and to generate private-key-based signatures. Client certificates allow an SSL/TLS
server to verify the identity of a connecting client. The verifying server can be co-located within a SIP
server or a configuration server or it can be an independent network entity. This mechanism of identity
verification also eliminates the need for standard authentication mechanisms such as username/password authentication
Authentication/Provisioning Server
provisioning.mycompany.com)
(
m9 Base Station
Set up TLS connections.
Prove your identity.
X.509 Certicate
Sign something with your certcate.
Signature
Authenticated
Encrypted connection
20
Loading...