Remote Provisioning Features; Using Configuration Profiles - Linksys SPA9000 Administration Manual

NOTIFY sip:14089991003@172.16.22.23:5062 SIP/2.0
Via: SIP/2.0/UDP 178.178.221.230;branch=z9hG4bK-44f9d0f0
From: <sip:voicemail@sip.myitsp.com>;tag=ab789
To: <sip:5031@172.16.22.23:5062>;tag=ac6013983cce7526
Call-ID: ace86200-bbe839de@178.178.221.230
CSeq: 537
NOTIFY Expires: 30
Event: message-summary User-Agent: ITSP/Voicemail-Server
Content-Length: 0
Messages-Waiting: yes
Voice-Message: 2/8 (0/2)
Note that SPA9000 does not require the NOTIFY to be sent within the
Note
same subscription dialog. That is, it accepts the NOTIFY even without a
TO-tag or a matching Call-ID as the original SUBSCRIBE.

Remote Provisioning Features

The SPA9000 provides for secure provisioning and remote upgrade. Provisioning is achieved
through configuration profiles that are transferred to the device via TFTP, HTTP, or HTTPS.

Using Configuration Profiles

The SPA9000 accepts configuration profiles in XML format, or alternatively in a proprietary
binary format, which is generated by a profile compiler tool available from Linksys. The
SPA9000 supports up to 256-bit symmetric key encryption of profiles. For the initial transfer of
the profile encryption key (initial provisioning stage), the SPA9000 can receive a profile from an
encrypted channel (HTTPS with client authentication), or it can resync to a binary profile
generated by the Linksys-supplied profile compiler. In the latter case, the profile compiler can
encrypt the profile specifically for the target SPA9000, without requiring an explicit key
exchange.
The XML file consists of a series of elements (one per configuration parameter), encapsulated
within the element tags <flat-profile> ... </flat-profile>. The encapsulated elements specify
values for individual parameters.
Refer to the following example of a valid XML profile:
<flat-profile>
<Admin_Passwd>some secret</Admin_Passwd>
<Upgrade_Enable>Yes</Upgrade_Enable>
</flat-profile>
Binary format profiles contain SPA9000 parameter values and user access permissions for the
parameters. By convention, the profile uses the extension .cfg (for example, spa2000.cfg). The
Linksys Profile Compiler (SPC) tool compiles a plain-text file containing parameter-value pairs
into a properly formatted and encrypted .cfg file. The SPC tool is available from Linksys for the
Win32 environment and Linux-i386-elf environment. Requests for SPC tools compiled on other
Linksys Voice System Administration Guide
Remote Provisioning Features
145