Changing The Key On The Phone - Polycom SIP 3.1 Administrator's Manual

Note
Note
Central
(boot server)

Changing the Key on the Phone

You can check whether an encrypted file is the same as an unencrypted file by:
1. Run the configFileEncrypt utility on the unencrypted file with the "-d"
option. This shows the "digest" field.
2. Look at the encrypted file using WordPad and check the first line that
shows a "Digest=...." field. If the two fields are the same, then the
encrypted and unencrypted file are the same.
If a phone downloads an encrypted file that it cannot decrypt, the action is logged,
an error message displays, and the phone reboots. The phone will continue to do
this until the boot server provides an encrypted file that can be read, an
unencrypted file, or the file is removed from the master configuration file list.
The SoundPoint IP 300 and 500 phones will always fail at decrypting files. These
phones will recognize that a file is encrypted, but cannot decrypt it and will display
an error. This information is logged. Encrypted configuration files can only be
decrypted on the SoundPoint IP 301, 320, 330, 430, 501,550, 560, 600, 601, 650,
and 670 and the SoundStation IP 4000, 6000, and 7000 phones.
The master configuration file cannot be encrypted on the boot server. This file is
downloaded by the bootROM that does not recognize encrypted files. For more
information, refer to Master Configuration Files
The following configuration file changes are required to modify this feature:
Configuration File: sip.cfg
Configuration file:
<device>.cfg
For security purposes, it may be desirable to change the key on the phones and
the server from time to time.
To change a key:
1. Put the new key into a configuration file that is in the list of files
downloaded by the phone (specified in 000000000000.cfg or <Ethernet
address>.cfg).
Use the device.sec.configEncryption.key parameter to specify the
new key.
Miscellaneous Administrative Tasks
on page 2-5.
Specify the phone-specific contact directory and the
phone-specific configuration override file.
For more information, refer to
<encryption/> on page A-89.
Change the encryption key.
For more information, refer to
Configuration on page A-124.
Encryption
Flash Parameter
C - 5