Polycom CX5500 Unified Conference Station Administrator’s Guide 1.1.0
Polycom, Inc. 185
DES-CBC-SHA, DES-CBC3-SHA
DHE-DSS-AES128-SHA, DHE-DSS-AES256-SHA, DHE-RSA-AES128-SHA, DHE-RSA-
AES256-SHA
EXP-RC4-MD5, EXP-DES-CBC-SH, EXP-EDH-DSS-DES-CBC-SHA, EXP-DES-CBC-SHA,
EXP-ADH-RC4-MD5, EXP-ADH-DES-CBC-SHA, EXP-EDH-RSA-DES-CBC-SHA
EDH-RSA-DES-CBC-SHA, EDH-DSS-DES-CBC3-SHA, EDH-DSS-CBC-SHA
Tip: Changes to the Default TLS Cipher Suites in UC Software 4.0.0
Changes have been made to the default TLS cipher suites in UC Software 4.0.0. If you created
customized TLS cipher suites in a previous release of the UC Software, your changes will be lost
unless you backup the configuration files.
Configurable TLS Cipher Suites
Central Provisioning Server
Specify the global cipher list
site.cfg > sec.TLS.cipherList
Specify the cipher list for a specific TLS Platform Profile or TLS
Application Profile
site.cfg > sec.TLS.<application>.cipherList
Web Configuration Utility
To specify the cipher list for a specific TLS Platform Profile or TLS Application Profile, navigate to Settings >
Network > TLS and expand the TLS Profiles menu.
Local Phone User Interface
To specify the cipher list for a specific TLS Platform Profile or TLS Application Profile, navigate to Settings >
Advanced > Admin Settings > TLS Profiles > Configure TLS Profiles, select a profile, and choose Configure
Cipher Suite.
Secure Real-Time Transport Protocol
Secure Real-Time Transport Protocol (SRTP) provides a way of encrypting audio stream(s) to avoid
interception and eavesdropping on phone calls. As described in RFC 3711, both RTP and RTCP
signaling may be encrypted using an AES (advanced encryption standard) algorithm. The parameters
used to configure SRTP are shown in Secure Real Time Transport Protocol Parameters. When this