18.6.2.1. Distribution of a CA Certificate 
In the subscriber the transport protocol can be set to TCP or TLS
(via menu, WBM of the subscriber or DLS). If encryption is used
the protocol TLS must be used for the subscriber.
An IP subscriber only gets a CA certificate. The SPE certificate will
be sent directly from the gateway to the IP subscriber, if the subscriber
is working with the TLS protocol.
The CA certificate can be distributed to the phone only via the DLS.
A manual distribution as for the gateways is not possible.
Distribution of the certificate to the subscriber via DLS.
IP Devices > IP Phone Configuration > Signaling
and Payload Encryption (SPE) > tab SPE CA Certificate
Select
the CA certificate by using the button Import Certificate and
Browse.
Figure 397. If the import of the certificate was successful a message is displayed.
Figure 398. Activation of the certificate.
If
the activation was successful the status (Status Active/Import)
will change from no active certificate to equal.
