When the phone initiates a TLS connection to services such as, SIP, Provisioning, LDAP, and PPM, the server presents its server identity certificate. The server identity certificate is signed by a Certificate Authority (CA). The phone maintains a trust store of CA certificates to validate the server identity certificate presented.