+- Yealink Forums (http://forum.yealink.com/forum)
+-- Forum: IP Phone Series (/forumdisplay.php?fid=4)
+--- Forum: Phone specific topic (/forumdisplay.php?fid=12)
+--- Thread: T29G v81 Provisioning w/ Encryption (/showthread.php?tid=40513)
T29G v81 Provisioning w/ Encryption - fastdevice - 01-11-2017 08:39 PM
Does anyone know where I can find a guide to explain encryption using the new v81 firmware provisioning method?
The legacy v80 provisioning doesn't work in the clear or encrypted with the firmware updated to V81. However, it does work using the new scheme in the clear.
RE: T29G v81 Provisioning w/ Encryption - Lucia_Yealink - 01-12-2017 03:41 AM
For your problem, please refer to the Auto provision guide below:
http://download.support.yealink.com/download?path=upload%2Fattachment%2F2016-12-1%2F3%2F73d53aa7-5497-4fc0-b48b-8a6fc04a3b53%2FYealink_SIP-T2%20Series_T19%28P%29%20E2_T4_Series_IP_Phones_Auto_Provisioning_Guide_V81_20.pdf
RE: T29G v81 Provisioning w/ Encryption - fastdevice - 01-13-2017 02:01 PM
I'm getting a little closer...
The below config forces a GET on the _Security.enc files, but the files are then ignored.
static.auto_provision.aes_key_in_file = 1
1. Did the encryption change, I'm still using the Linux binary from the older v80?
2. How do I "enable the phone to update encrypted configuration settings?" Is there another setting?
Also, once "static.auto_provision.aes_key_in_file = 1" is enabled, each subsequent auto provision only looks for mac.boot and mac_Security.enc regardless of what is in mac.boot. In fact, you can delete the mac.boot file altogether and it still looks for mac_Security.enc. Therefore, what is the reason for having the .boot file?
RE: T29G v81 Provisioning w/ Encryption - fastdevice - 01-13-2017 07:19 PM
brought up a syslog server and looked at the output.
I"m getting two errors:
ATP <+3error > Only Update file_decryptd configs!
ATP <+3error > Decrypt file fail
RE: T29G v81 Provisioning w/ Encryption - Lucia_Yealink - 01-16-2017 12:09 PM
I will reply with you in Yealink Ticket.