Yealink T21PE2 - Page 397

Security Features
391
Parameter static.auto_provision.update_file_mode <y0000000000xx>.cfg
Description It enables or disables the IP phone only to download the encrypted files.
Permitted
Values
0-Disabled, the IP phone will download the configuration files (for example, sip.cfg, account.cfg,
<MAC>-local.cfg) and <MAC>-contact.xml file from the server during auto provisioning no matter
whether the files are encrypted or not. And then resolve these files and update settings onto the IP phone
system.
1-Enabled, the IP phone will only download the encrypted configuration files (for example, sip.cfg,
account.cfg, <MAC>-local.cfg) or <MAC>-contact.xml file from the server during auto provisioning, and
then resolve these files and update settings onto the IP phone system.
Default 0
Parameter static.auto_provision.aes_key_in_file <y0000000000xx>.cfg
Description It enables or disables the IP phone to decrypt configuration files using the encrypted AES keys.
Permitted
Values
0-Disabled, the IP phone will decrypt the encrypted configuration files using plaintext AES keys con-
figured on the IP phone.
1-Enabled, the IP phone will download <xx_Security>.enc files (for example, <sip_Security>.enc,
<account_Security>.enc) during auto provisioning, and then decrypts these files into the plaintext keys
(for example, key2, key3) respectively using the phone built-in key (for example, key1). The IP phone then
decrypts the encrypted configuration files using the corresponding key (for example, key2, key3).
Default 0
Parameter static.auto_provision.aes_key_16.com <y0000000000xx>.cfg
Description
It configures the plaintext AES key for encrypting/decrypting the Common CFG/Custom CFG file.
The valid characters contain: 0 ~ 9, A ~ Z, a ~ z and the following special characters are also supported: #
$ % * + , - . : = ? @ [ ] ^ _ { } ~.
Example:
static.auto_provision.aes_key_16.com = 0123456789abcdef
Note: For decrypting, it works only if “static.auto_provision.aes_key_in_file” is set to 0 (Disabled). If the
downloaded MAC-Oriented file is encrypted and the parameter “static.auto_provision.aes_key_16.mac” is
left blank, the IP phone will try to encrypt/decrypt the MAC-Oriented file using the AES key configured by
the parameter “static.auto_provision.aes_key_16.com”.
Permitted
Values
16 characters
Default Blank
Web UI Settings->Auto Provision->Common AES Key
Phone UI
T54S/T52S/T48S/T48G/T46S/T46G/T29G:
Menu->Advanced (default password: admin) ->Auto Provision->Common AES Key
T42G/T42S/T41P/T41S/T40P/T40G/T27G/T23P/T23G/T21(P) E2/T19(P) E2/CP920:
Menu->Settings->Advanced Settings (default password: admin) ->Auto Provision->Common AES Key
Parameter static.auto_provision.aes_key_16.mac <y0000000000xx>.cfg
Description
It configures the plaintext AES key for encrypting/decrypting the MAC-Oriented files (<MAC>.cfg,
<MAC>-local.cfg and <MAC>-contact.xml).