Yealink SIP-T2 Series Administrator's Manual page 397

Parameter static.auto_provision.update_file_mode
Description It enables or disables the IP phone only to download the encrypted files.
0-Disabled, the IP phone will download the configuration files (for example, sip.cfg, account.cfg,
<MAC>-local.cfg) and <MAC>-contact.xml file from the server during auto provisioning no matter
whether the files are encrypted or not. And then resolve these files and update settings onto the IP phone
Permitted
system.
Values
1-Enabled, the IP phone will only download the encrypted configuration files (for example, sip.cfg,
account.cfg, <MAC>-local.cfg) or <MAC>-contact.xml file from the server during auto provisioning, and
then resolve these files and update settings onto the IP phone system.
Default 0
Parameter static.auto_provision.aes_key_in_file
Description It enables or disables the IP phone to decrypt configuration files using the encrypted AES keys.
0-Disabled, the IP phone will decrypt the encrypted configuration files using plaintext AES keys con-
figured on the IP phone.
Permitted
1-Enabled, the IP phone will download <xx_Security>.enc files (for example, <sip_Security>.enc,
Values
<account_Security>.enc) during auto provisioning, and then decrypts these files into the plaintext keys
(for example, key2, key3) respectively using the phone built-in key (for example, key1). The IP phone then
decrypts the encrypted configuration files using the corresponding key (for example, key2, key3).
Default 0
Parameter static.auto_provision.aes_key_16.com
It configures the plaintext AES key for encrypting/decrypting the Common CFG/Custom CFG file.
The valid characters contain: 0 ~ 9, A ~ Z, a ~ z and the following special characters are also supported: #
$ % * + , - . : = ? @ [ ] ^ _ { } ~.
Example:
Description
static.auto_provision.aes_key_16.com = 0123456789abcdef
Note: For decrypting, it works only if "static.auto_provision.aes_key_in_file" is set to 0 (Disabled). If the
downloaded MAC-Oriented file is encrypted and the parameter "static.auto_provision.aes_key_16.mac" is
left blank, the IP phone will try to encrypt/decrypt the MAC-Oriented file using the AES key configured by
the parameter "static.auto_provision.aes_key_16.com".
Permitted
16 characters
Values
Default Blank
Web UI Settings->Auto Provision->Common AES Key
T54S/T52S/T48S/T48G/T46S/T46G/T29G:
Menu->Advanced (default password: admin) ->Auto Provision->Common AES Key
Phone UI
T42G/T42S/T41P/T41S/T40P/T40G/T27G/T23P/T23G/T21(P) E2/T19(P) E2/CP920:
Menu->Settings->Advanced Settings (default password: admin) ->Auto Provision->Common AES Key
Parameter static.auto_provision.aes_key_16.mac
It configures the plaintext AES key for encrypting/decrypting the MAC-Oriented files (<MAC>.cfg,
Description
<MAC>-local.cfg and <MAC>-contact.xml).
<y0000000000xx>.cfg
<y0000000000xx>.cfg
<y0000000000xx>.cfg
<y0000000000xx>.cfg
Security Features
391