The customer provisioning server is typically configured to provide the phone with Private Trust CA certificates to use with services such as SIP, Provisioning, LDAP, and PPM. Configure the TRUSTCERTS and MAX_TRUST_CERTS parameters for the phones to download and use the certificates to authenticate the server identity certificates.