New Forum system requires email address which you used to apply for your account to replace your original username. Password stays the same.Please see this post for more details
http://forum.yealink.com/forum/showthread.php?tid=40344

Yealink Test Club has been officially launched. Please visit post below to get detail information. Come and join us!
http://forum.yealink.com/forum/announcements.php?aid=18

We just had the YMCS online and we are also working on the features plan on the future versions, in this regard we are need to hear your voice about the YMCS.
Please visit : http://forum.yealink.com/forum/showthread.php?tid=42322


Post Reply 
 
Thread Rating:
  • 0 Votes - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Autoprovision - config file encryption problem
Author Message
Rus Offline
Junior Member
**

Posts: 11
Joined: Mar 2018
Reputation: 0
Post: #8
RE: Autoprovision - config file encryption problem
(03-28-2018 10:07 AM)Rus Wrote:  
(12-24-2013 11:27 AM)Yealink Support Wrote:  Hi oea,
Please test below steps and kindly feed back to me.
Don't forget to enable "auto_provision.aes_key_in_file =1" in the CFG file before upload encryption files.
1. Add/Edit the following parameters in configuration files(not encryption). Then do auto provisioning to all phones.
-----------------------------------
#!version:1.0.0.1
auto_provision.aes_key_in_file =1
auto_provision.update_file_mode =1
-----------------------------------
2. The administrator encrypts y000000000007.cfg and MAC.cfg files and put them to the root
directory of the provisioning server.
3. Reboot the IP phone to trigger auto provisioning process. For more information, refer to Yealink IP Phones Auto Provisioning Guide.

Can I please be 100% clear since I cannot find the exact answer anywhere on the forums...

I have a boot file which calls 2 cfg files.

Do I place the auto_provision.aes_key_in_file =1 line in the .boot file or in the cfg files?
If I place the line into the cfg files, do I need to get the phone to load these in unencrypted fashion or should I encrypt the modified files and then get the phone to reload them?

For anyone who might be interested... I have now resolved this.
I created a file called enc.cfg and amended the url on Yealink RPS Provisioining Server to point to <myprovisioningserver>/enc.cfg
enc.cfg:
#!version:1.0.0.1

static.auto_provision.aes_key_in_file=1
auto_provision.aes_key_in_file=1
static.auto_provision.server.url=<myprosioingserverurl>
static.auto_provision.reboot_force.enable =1

This tells the phone to use encrypted mode and to auto-reboot.

We know that the phones, when they reboot, will look for either a <modelref>.cfg file or <mac>.boot file to boot from.

Since the boot file cannot be encrypted but contains no sensitive information, I get the phone to boot from my <mac>.boot file.

This looks like this:
include:config "<mac>.cfg"
include:config "T23.cfg"
overwrite_mode = 1

static.auto_provision.reboot_force.enable =0

The <mac>.cfg file contains device specific configuration.
The T23.cfg file contains the account setup which is common to all T23 phones.Both of these cfg files are encrypted using the Yealink Auto Encryption tool.

The static.auto..... line tells the phone to stop auto-booting as the configuration is complete.

The encrypted files including their _Security.enc counterparts along with the Aeskey text file, are copied to my provisioning server.

When the phone is factory reset (press and hold the OK button) it first looks at the Yealink RPS service, then looks up the provisioning URL I saved there, and loads the enc.cfg file.

It cycles through loading and rebooting (for around 3 minutes) and then comes to rest with all the config loaded.

Hope this helps someone.
(This post was last modified: 04-11-2018 11:04 AM by Rus.)
04-11-2018 11:03 AM
Find all posts by this user    like1    dislike0 Quote this message in a reply
Post Reply 


Messages In This Thread
RE: Autoprovision - config file encryption problem - Rus - 04-11-2018 11:03 AM

Possibly Related Threads...
Thread: Author Replies: Views: Last Post
  Hard reset a T20P and erase config Kevinlloyd 31 60,492 11-13-2019 10:41 AM
Last Post: olaf_89
  How to erase a parameter using autoprovision file Santi 1 572 06-21-2019 10:25 AM
Last Post: complex1
  Local Phonebook autoprovision Aber 6 2,096 06-11-2019 01:55 AM
Last Post: Aber
  Bulk Manual config Tx Series ( With Server URL, Username & Password ) stéphane 2 1,106 01-28-2019 04:01 PM
Last Post: jolouis
  Ni file name in POST URLs [Was: How exactly are -local.cfg files POSTed to server ?] oliv 8 3,606 11-09-2018 01:58 PM
Last Post: jolouis
  Auto provisioning file names shane.caznet 1 1,604 10-12-2018 02:56 PM
Last Post: jolouis
  Security Concerns regarding the AES key encryption using factory default key jeffrey.zhao@iptcloud.com 0 760 08-13-2018 03:34 AM
Last Post: jeffrey.zhao@iptcloud.com
  Encryption for Linux_x64 kapetrosyan 0 667 07-03-2018 03:12 AM
Last Post: kapetrosyan
Sad DHCP timezone problem in v83 TrK 3 1,880 06-04-2018 06:12 AM
Last Post: TrK
  Enabling Remote Phone Book via Config File moosemasterson 6 15,249 04-11-2018 02:06 PM
Last Post: sbsllc

Forum Jump:


User(s) browsing this thread: 1 Guest(s)

Contact Us   Yealink   Return to Top   Return to Content   Lite (Archive) Mode   RSS Syndication