Htek UC601 - Page 12

9
3. Encrypt Configuration Files
Htek Configuration Generator allows user to encrypt the generated configuration file with
AES 128-bit encryption. It allows user to choose not to encrypt the configuration file in
Windows version, but it is recommended to use encryption for security reason.
3.1 How to encrypt the XML configuration file
The XML configuration file could be encrypted in AES-128-CBC algorithm. The encryption
password is defined in P8631 (Management->Auto Provision->Set Common AES Key) of
the configuration file.
The Password length is from 1-16, and password must be [ 0-9, A-F]
THE SHARED IV: 0B1E1D000F0B07091D1F04071F1E0407
The OpenSSL command-line to encrypt the file is as follows:
Openssl enc –e –aes-128-cbc –K <password>-iv
0B1E1D000F0B07091D1F04071F1E0407 –in cfg.xml –out cfgxxxxxxxxxxxx.xml
When the XML configuration file is encrypted in this method, Phone would only be able to
decrypt and parse the file if user set the XML Config File Password in P8631 of binary
configuration file or in the web UI.
Detailed steps:
Step 1: Login webpage, click ManagementConfiguration, download cfg.xml file, then run,
input” Openssl enc –e –aes-128-cbc –K<password>-iv
0B1E1D000F0B07091D1F04071F1E0407 –in cfg.xml –out Cfgxxxxxxxxxxxx.xml”
(xxxxxxxxxxxx is the MAC address)
THE SHARED IV: 0B1E1D000F0B07091D1F04071F1E0407
Step 2: Put the Cfgxxxxxxxxxxxx.xml under upgrade server path
Step 3: You must set the AES Key: ManagementAuto Provision: AES Key: