Specifications

ShoreWare Server Release Notes SRTP-AES
ShoreTel 9.1 Page 79
Call Manager and ShorePhones display a padlock icon for each call utilizing SRTP
encryption. The Call History list also uses the padlock icon to denote encrypted calls.
ShorePhones IP210, IP110, and IP115 do not display the encrypted call padlock icon. The
padlock icon indicates that the call media is secure on the ShoreTel network. ShoreTel
cannot guarantee call security outside of the network, such as calls that terminate across an
analog or digital trunk. The padlock icon is not displayed when Proprietary Encryption is
active.
The ShoreTel Conference Bridge, the IP 8000 Conference Phone, voicemail, and auto
attendant do not support SRTP-AES encryption.
Phones that do not support SRTP cannot perform barge in, whisper, or silent monitor
functions on existing calls that are SRTP encrypted. When added to a call using SRTP, new
parties using devices that do not support SRTP exchange unencrypted media streams. SRTP
does not address user registration, call setup, or signaling related security.
Installation and Upgrades
SRTP-AES support requires the upgrade of switch software and phone firmware to ShoreTel
9. Upgrades of AES/SRTP in switches and IP phones may be decoupled. Phone calls are
encrypted with the proprietary method on phones that do not support AES/SRTP.
Media Encryption is disabled on new installations. Media Encryption settings remain in
place after a system is upgraded to ShoreTel 9.
Provisioning
Encryption is configured in the Call Control: Options panel, shown in Figure 32. The
Media Encryption parameter determines the encryption setting for the entire system.
Figure 32 Configuring Media Encryption