Security Features
327
left blank, the phone will try to encrypt/decrypt the MAC-Oriented file using the AES key configured by
the parameter “static.auto_provision.aes_key_16.com”.
Permitted
Values
16 characters
Default Blank
Web UI Settings->Auto Provision->Common AES Key
Phone UI Settings->Advanced Settings (default password: admin) ->Auto Provision->Common
Parameter static.auto_provision.aes_key_16.mac <y0000000000xx>.cfg
Description
It configures the plaintext AES key for encrypting/decrypting the MAC-Oriented files (<MAC>.cfg,
<MAC>-local.cfg and <MAC>-contact.xml).
The valid characters contain: 0 ~ 9, A ~ Z, a ~ z and the following special characters are also supported: #
$ % * + , - . : = ? @ [ ] ^ _ { } ~.
Example:
static.auto_provision.aes_key_16.mac = 0123456789abmins
Note: For decrypting, it works only if “static.auto_provision.aes_key_in_file” is set to 0 (Disabled). If the
downloaded MAC-Oriented file is encrypted and the parameter “static.auto_provision.aes_key_16.mac” is
left blank, the phone will try to encrypt/decrypt the MAC-Oriented file using the AES key configured by
the parameter “static.auto_provision.aes_key_16.com”.
Permitted
Values
16 characters
Default Blank
Web UI Settings->Auto Provision->MAC-Oriented AES Key
Phone UI Settings->Advanced Settings (default password: admin) ->Auto Provision->MAC-Oriented AES
Parameter
static.autoprovision.X.com_aes
[1][2]
<y0000000000xx>.cfg
Description
It configures the plaintext AES key for decrypting the Common CFG file.
If it is configured, it has a higher priority than the value configured by the parameter “static.auto_pro-
vision.aes_key_16.com”.
Permitted
Values
16 characters
Default Blank
Parameter
static.autoprovision.X.mac_aes
[1][2]
<y0000000000xx>.cfg
Description
It configures the plaintext AES key for decrypting the MAC-Oriented CFG file.
If it is configured, it has a higher priority than the value configured by the parameter “static.auto_pro-
vision.aes_key_16.mac”.
Permitted
Values
16 characters
Default Blank
Parameter static.auto_provision.encryption.config <y0000000000xx>.cfg
Description It enables or disables the phone to encrypt <MAC>-local.cfg file using the plaintext AES key.