Mitel 6800i Series Administrator's Manual page 55

Authentication Support for HTTP/HTTPS Download Methods for BroadSoft Client
Management System (CMS)
The IP Phones have authentication support as referenced in RFC 2617 when using HTTP or
HTTPS as download protocols. If a 5i Series phone is challenged by an HTTP or HTTPS server
when the server attempts to download the startup.cfg file, the phone automatically sends
"aastra" as the default Username and Password back to the server. For more information about
this feature, see Chapter 5, the section,
Methods, used with BroadSoft Client Management System (CMS)"
USING HTTPS VIA THE MITEL WEB UI
HTTPS is enabled by default on the IP phones. When you open a browser window and enter
an IP address or host name for a phone using HTTP, a server redirection occurs which
automatically converts an HTTP connection to an HTTPS connection. After the redirection, a
"Security Alert" certificate window displays alerting the user that information exchanged with
the phone cannot be viewed or changed by others. Accepting the certificate then forwards you
to the phone's Web UI.
Notes:
1. The private key and certificate generate outside the phone and embed in the phone
firmware for use by the HTTPS server during the SSL handshake.
2. Using the configuration files, the IP phone UI, or the Mitel Web UI, you can configure
the following regarding HTTPS:
• Specify HTTPS security client method to use (TLS 1.0 or SSL 3.0)
• Enable or disable HTTP to HTTPS server redirect function
• HTTPS server blocking of XML HTTP POSTS to the phone
REFERENCE
For more information on configuring the HTTPS protocol, see Chapter 4, the sections:
• "Configuring the Configuration Server Protocol"
• "HTTPS Client/Server Configuration"
"Authentication Support for HTTP/HTTPS Download
on page 4-91
on page 4-29
2-7
Configuration Methods
on page 5-297.