Configuring Security Features
893
AES keys must be 16 characters and the supported characters contain: 0-9, A-Z, a-z and the
following special characters are also supported: # $ % * + , - . : = ? @ [ ] ^ _ { } ~.
3. Click Confirm to accept the change.
To configure AES keys via phone user interface:
1. Press Menu->Advanced (default password: admin) ->Auto Provision.
2. Enter the values in the Common and MAC-Oriented AES fields.
AES keys must be 16 characters and the supported characters contain: 0-9, A-Z, a-z and the
following special characters are also supported: # $ % * + , - . : = ? @ [ ] ^ _ { } ~.
3. Press the Save soft key to accept the change.
Encrypted configuration files can be downloaded from the provisioning server to protect against
unauthorized access and tampering of sensitive information (e.g., login passwords, registration
information).
Yealink supplies a configuration encryption tool for encrypting configuration files. The
encryption tool encrypts plaintext configuration files (e.g., account.cfg, <y0000000000xx>.cfg,
<MAC>.cfg) (one by one or in batch) using 16-character symmetric keys (the same or different
keys for configuration files) and generates encrypted configuration files with the same file name
as before.
Note
This tool also encrypts the plaintext 16-character symmetric keys using a fixed key, which is the
same as the one built in the IP phone, and generates new files named as <xx_Security>.enc (xx
indicates the name of the configuration file, for example, y000000000028_Security.enc for
y000000000028.cfg file, account_Security.enc for account.cfg). This tool generates another new
file named as Aeskey.txt to store the plaintext 16-character symmetric keys for each
You can also configure the <MAC>-local.cfg files to be automatically encrypted using
16-character symmetric keys when uploading to the server (by setting the value of the parameter
“static.auto_provision.encryption.config” to 1).
To Next Page
Loading...
Need help?
General
