Procedure To Encrypt Configuration Files - Yealink SIP-T2XP Administrator's Manual

Administrator's Guide for SIP-T2xP and SIP-T19P IP Phones
symmetric keys (the same or different keys for configuration files) and generates
encrypted configuration files with the same file name as before. This tool also encrypts
the plaintext 16-character symmetric keys using a fixed key, which is the same as the
one built in the IP phone, and generates new files named as <xx_Security>.enc (xx
indicates the name of the configuration file, for example, y000000000000_Security.enc
for y000000000000.cfg file). This tool generates another new file named as Aeskey.txt to
store the plaintext 16-character symmetric keys for each configuration file.
For a Microsoft Windows platform, you can use a Yealink-supplied encryption tool
"Config_Encrypt_Tool.exe" to encrypt the <y0000000000xx>.cfg and <MAC>.cfg files
respectively.
Note
Yealink also provides a configuration encryption tool (yealinkencrypt) for Linux platform
if required. For more information, refer to
Guide
.
For security reasons, administrator should upload encrypted configuration files,
<y0000000000xx_Security>.enc and/or <MAC_Security>.enc files to the root directory
of the provisioning server. During auto provisioning, the IP phone requests to download
<y0000000000xx>.cfg file first. If the downloaded configuration file is encrypted, the
phone will request to download <y0000000000xx_Security>.enc file (if enabled) and
decrypt it into the plaintext key (e.g., key2) using the built-in key (e.g., key1). Then the IP
phone decrypts <y0000000000xx>.cfg file using key2. After decryption, the IP phone
resolves configuration files and updates configuration settings onto the IP phone
system.
The way the IP phone processes the <MAC>.cfg file is the same to that of
the<y0000000000xx>.cfg file.

Procedure to Encrypt Configuration Files

To encrypt the <y0000000000xx>.cfg file:
1. Double click "Config_Encrypt_Tool.exe" to start the application tool.
The screenshot of the main page is shown as below:
When you start the application tool, a file folder named "Encrypted" is created
220
Yealink Configuration Encryption Tool User