[YMCS/YDMP Free Trial Program]Yealink would like to offer Free Trial Program of Yealink device management service for our current eligible customers. You can see the details below.
https://www.yealink.com/ydmp-freetrial-2020


Post Reply 
 
Thread Rating:
  • 0 Votes - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Provisioning in v81 and encryption
Author Message
Dalton Offline
Asterisk DCAP Certified Engineer
**

Posts: 10
Joined: May 2015
Reputation: 0
Post: #1
Provisioning in v81 and encryption
Hi There

I have encrypted the common CFG file and the MAC CFG file, however, the phone (T23G - v44.81.0.15) that I am testing with does not decrypt the phones. The latest document states that we are to set the parameter to "static.auto_provision.aes_key_in_file = 1". If I do this in the common file and then encrypt the common file, it doesn't know to set this parameter. So if I only encrypt rhe MAC CFG file and don't encrypt the common file, then it works.

I need to encrypt both the common and CFG files, how can I get the phone to decrypt the files if the parameter that tells it to look for the encrypted files is encrypted in and of itself?

P.S: I tried using the boot file to look for a file called "enc.cfg" that contains "static.auto_provision.aes_key_in_file = 1", but then the phone doesn't proceed to look for its common CFG and MAC CFG file. How can I also get the boot file to contain a variable to tell the phone to look for its own MAC Oriented file and Common file? Then I can share this common boot file across all endpoints telling it to look for the encrypted configuration files.

Regards
Dalton
07-25-2017 01:58 PM
Find all posts by this user    like0    dislike0 Quote this message in a reply
eagle21221 Offline
Junior Member
**

Posts: 2
Joined: Nov 2017
Reputation: 0
Post: #2
RE: Provisioning in v81 and encryption
The way i found out is a pain and alot of work.

you need to set a boot file for each phone. IE the phone's "macaddress.boot"

Then inside the "macaddress.boot" have:
########################
#!version:1.0.0.1
## The header above must appear as-is in the first line

include:config <encrypt.cfg> #<- not encrypted
include:config "y0000000000xx.cfg" #<- encrypted
include:config "macaddress.cfg" #<- encrypted

overwrite_mode = 1
########################

Inside encrypt.cfg
########################
#!version:1.0.0.1
static.auto_provision.aes_key_in_file = 1

#it seems to lose its provisioning settings after the first time you run it.
static.auto_provision.server.url =
static.auto_provision.server.username =
static.auto_provision.server.password =
########################
Then put the files in the root folder of the provision server url.

encrypt.cfg #<- not encrypted
y0000000000xx.cfg #<- encrypted
macaddress.cfg #<- encrypted

its a pain and you need to run it twice, first time it goes through and sets decrypt by file, and the second time it auto provisions it decrypts the files.

another easier way is just use a site AES key and when your setting up the auto provision server on the phone you just input the site AES key for both common and mac. Better than going through and setting up a boot for each phone.
11-09-2017 03:20 PM
Find all posts by this user    like0    dislike0 Quote this message in a reply
Post Reply 


Possibly Related Threads...
Thread: Author Replies: Views: Last Post
  Setting of lang.gui via remote provisioning cloudaware 1 45 10-26-2021 07:11 PM
Last Post: cloudaware
  zero touch provisioning & firewall gareth20202 2 319 10-09-2021 04:55 PM
Last Post: Phil2021
  Step by Step for Auto Provisioning nguyenp 2 2,970 08-06-2021 04:27 PM
Last Post: Phil2021
  disable provisioning on T26P yeaphild 0 2,103 02-25-2021 07:25 PM
Last Post: yeaphild
  Provisioning only works on startup Snapdragons 3 3,938 09-29-2020 12:49 AM
Last Post: Jay_Yealink
  Provisioning of W60B Speeddial secure42tganick 3 3,908 07-30-2020 10:27 AM
Last Post: complex1
  T42G toggling between UDP and TLS on provisioning GNIL 0 1,801 04-28-2020 02:12 PM
Last Post: GNIL
  Encryption for Linux_x64 kapetrosyan 1 2,727 03-17-2020 08:23 AM
Last Post: kapetrosyan
  Auto provisioning seams to be (partly) broken in version 83 for T46G HaraldL 2 6,401 07-02-2019 03:04 PM
Last Post: Fraukas2
  Provisioning Multiple Wallpapers BryanLee 1 3,600 04-24-2019 08:39 PM
Last Post: joew

Forum Jump:


User(s) browsing this thread: 1 Guest(s)

Contact Us   Yealink   Return to Top   Return to Content   Lite (Archive) Mode   RSS Syndication