TB30s SIP Administrator Guide v1.3 Page 110 of 259
Improve HTTPS APS feature
TB30 HTTPS auto provisioning supports both client and server authentication
with using certificates. This improvement is totally enhanced a reliable and
secure provisioning based on HTTPS requests from TB30 to server and
server to TB30.
With using HTTPS, the file transfer between TB30 and the provisioning
server are protected. The encryption method for the data between TB30 and
server is based on symmetric key cryptography. This methodology makes
use of a secret key, which is shared between TB30 and the provisioning
server over a secure channel. It ensures that the server and TB30 cannot be
interfered by other devices on the network.
Moreover, server and client authentication is performed using public/private
key encryption, with certificates containing the public key. Files encrypted
with a public key can be decrypted only by its corresponding private key
(and vice verse).
In server side, you should have an SSL server certificate. TB30 will recognize
only the certificate in the server side and try to authenticate the certificate
when connecting via HTTPS, or reject any server certificate if not valid.
Likewise, in client side, TB30 should also carry a unique client certificate
which is used to identify information about each individual server.
Therefore, before doing HTTPS APS, the phone needs to have the certificate
and the private key imported via webGui. And the server certificate should
also be ready as well.
Feature Activation
Via WebGui
To import the client certificate in TB30, you can visit the SETUP Basic
Setup HTTPS page, as shown like below:
Click the import button to upload the certificate and private key files.
Click the import button to upload the certificate authority root certificate.
You are also able to export the certificate by clicking Export.
Finally, press “Apply” to save the change.
To Next Page
Loading...
Need help?
General