Auto Provision - first time with encrypting..

[Gilb]

Hi,
how can I do autoprovision first time to device with encrypting?
the phone is blank,
how does he get the decpryption code?

what I should do?

Thanks.

[James_Yealink]

Hello,

Please refer to this document:
http://support.yealink.com/attachmentDow...V80_60.zip

Phone will decrpt a AES key from .enc file using it's certificate.
Then decrpt the configuration file with the AES key.
You will need to enable the fucntion through autoprovision:

auto_provision.aes_key_in_file = 1

Regards,
James

[Gilb]

but first time the device is boot it's settings are blank,
can u describe the whole process of it?
cause I need to enable it first:
auto_provision.aes_key_in_file =1
but I want it to do in the first boot / auto provision
how to do that?
Thanks.

[kapetrosyan]

hi, are you using RPS?
I can provide the template config files if you are using RPS.

[Gilb]

Please explain RPS,
If not?
what can I do?
Using tftp server..
Thanks..

[kapetrosyan]

(07-26-2015 03:23 AM)Gilb Wrote:  Please explain RPS,
If not?
what can I do?
Using tftp server..
Thanks..

If you have physical access to the phones web interface, so you dont need RPS. you can login to phone and set provisioning server address (tftp, ftp, http, etc..) but if you dont have so you need RPS.
Are you able to set provisioning server address in each phone you want?

RPS it a service provided by Yealink. It is Redirection service.
Phones are trying to connect to RPS server first, then if you have in your RPS account that phones MAC address it is redirecting the phone to your provisioning server.
You have to request RPS service account from Yealink.
Here is the info.
http://www.yealink.com/Upload/Version/Ye...557705.pdf

[Gilb]

I csn do it slso eith dhcp option
My problem is still
The default isnt set to 1 in option:
How i set it:
auto_provision.aes_key_in_file = 1
To get the aes txt file also at the first time doing auto provision??
Thanks

[kapetrosyan]

(07-26-2015 06:46 AM)Gilb Wrote:  I csn do it slso eith dhcp option
My problem is still
The default isnt set to 1 in option:
How i set it:
auto_provision.aes_key_in_file = 1
To get the aes txt file also at the first time doing auto provision??
Thanks

I'm using the following configuration and it works for me.

auto_provision.aes_key_16.com = 1234
auto_provision.aes_key_16.mac = 1234
auto_provision.aes_key_in_file =1
custom_mac_cfg.url =
auto_provision.dhcp_option.option60_value =

[Gilb]

(07-26-2015 12:13 PM)kapetrosyan Wrote:  

(07-26-2015 06:46 AM)Gilb Wrote:  I csn do it slso eith dhcp option
My problem is still
The default isnt set to 1 in option:
How i set it:
auto_provision.aes_key_in_file = 1
To get the aes txt file also at the first time doing auto provision??
Thanks

I'm using the following configuration and it works for me.

auto_provision.aes_key_16.com = 1234
auto_provision.aes_key_16.mac = 1234
auto_provision.aes_key_in_file =1
custom_mac_cfg.url =
auto_provision.dhcp_option.option60_value =

Please explain the whole proccess from the begining?
didnt understand,
the phone setting is default,
u send cfg file encrypted?
how it decrypted it on first time?
Thanks

[kapetrosyan]

(07-27-2015 10:26 AM)Gilb Wrote:  

(07-26-2015 12:13 PM)kapetrosyan Wrote:  

(07-26-2015 06:46 AM)Gilb Wrote:  I csn do it slso eith dhcp option
My problem is still
The default isnt set to 1 in option:
How i set it:
auto_provision.aes_key_in_file = 1
To get the aes txt file also at the first time doing auto provision??
Thanks

I'm using the following configuration and it works for me.

auto_provision.aes_key_16.com = 1234
auto_provision.aes_key_16.mac = 1234
auto_provision.aes_key_in_file =1
custom_mac_cfg.url =
auto_provision.dhcp_option.option60_value =

Please explain the whole proccess from the begining?
didnt understand,
the phone setting is default,
u send cfg file encrypted?
how it decrypted it on first time?
Thanks

1. Phone downloads the y0000000000XX.cfg file (not encrypted).
2. Phone downloads the MAC.cfg file and if that file is encrypted the phone requests MAC_Security.enc file.
and with that .enc file it decrypts the mac.cfg file.
if you want i can send you the working template of y0000000000XX.cfg and MAC.cfg and then you can set your settings in the file and encrypt by tool provided by Yealink.

btw, are you using Encrypt Tool provided by Yealink?