18.8.3.2. OpenScape Desk Phones 
OptiPoint phone support SPE but not mutual TLS. GW certificate verification
is possible only.
WBM> Administration > System > Signaling & Payload
Encryption (SPE)
For SPE choose from Transport mode select box TLS protocol
for Base and .
In order to validate GW certificate on phone side fill both Certificate
check boxes.