[FAQ] Changing cipher suites on Poly IP Phones

SteffenBaierUK · ‎04-16-2024

Poly VVX Business Media Phones, VVX IP Phones, Polycom SoundPoint IP, Polycom SoundStation IP, Polycom Trio and CCX phones can change the Cipher Suites.

The phone administrator can control which cipher suites will be offered/accepted during TLS session negotiation.

Check via the Phones Web Interface:

Settings > Network > TLS > TLS Profiles > Platform X settings.

Changing the Type to Custom allows to add or remove Cipher Suite

The UC Software Admin Guide contains details on the "Configurable TLS Cipher Suites"

Changing the Cipher:

The standard pre-configured Ciphers are shown below aka ALL with the exclusion of the ones specifically defined via the !.

(If ! is used then the ciphers are permanently deleted from the list. The ciphers deleted can never reappear in the list even if they are explicitly stated. Source >here <)

ALL:!aNULL:!eNULL:!DSS:!SEED:!ECDSA:!IDEA:!MEDIUM:!LOW:!EXP:!DH:!AECDH:!PSK:!SRP:!AES256-SHA:!AES128-SHA:!MD5:!RC4:@STRENGTH

If someone would want to also exclude the use of 3DES as an example simply add:

ALL:!aNULL:!eNULL:!DSS:!SEED:!ECDSA:!IDEA:!MEDIUM:!LOW:!EXP:!DH:!AECDH:!PSK:!SRP:!AES256-SHA:!AES128-SHA:!MD5:!RC4:!3DES:@STRENGTH

The configuration used for this would be:

<web device.set="1"
 device.sec.TLS.profile.cipherSuiteDefault1.set="1"
 device.sec.TLS.profile.cipherSuiteDefault1="0"
 device.sec.TLS.profile.cipherSuite1.set="1"  device.sec.TLS.profile.cipherSuite1="ALL:!aNULL:!eNULL:!DSS:!SEED:!ECDSA:!IDEA:!MEDIUM:!LOW:!EXP:!DH:!AECDH:!PSK:!SRP:!MD5:!RC4:!3DES:@STRENGTH" />

------------------------------------------------
Notice: I am an HP Poly employee but all replies within the community are done as a volunteer outside of my day role. This community forum is not an official HP Poly support resource, thus responses from HP Poly employees, partners, and customers alike are best-effort in attempts to share learned knowledge.
If you need immediate and/or official assistance for former Poly\Plantronics\Polycom please open a service ticket through your support channels
For HP products please check HP Support.

Please also ensure you always check the General VoIP , Video Endpoint , UC Platform (Microsoft) , PSTN

Featured blog article:

Create an account on the HP Community to personalize your profile and ask a question