Vendor Configuration File Encryption - Mitel 6800 Series Administrator's Manual

Example 5
Encrypting all cfg files in C:\data with password 1234abcd using MAC encryption and generating
a security.tuz file at the same time (for firmware version 3.3.1 and above):
C:\>anacrypt -d C:\data -p 1234abcd -m -i -v3
Example 6
Encrypting all cfg files in C:\data with password 1234abcd and generating a security.tuz file at
the same time (for firmware version 3.3.1 and above):
C:\>anacrypt -d C:\data -p 1234abcd -i -v3

VENDOR CONFIGURATION FILE ENCRYPTION

Some vendors can have specific methods to encrypt files on their configuration servers. For
each phone, the configuration server can generate a random hex string (encryption key) that
is used to encrypt the phone's MAC-specific configuration file.
The encryption key is placed in a plain text MAC-specific configuration file that the server
downloads to the phone. After the phone receives the file, it updates the encryption key.
Note: The phone will not reboot automatically after updating the configuration encryption
key. Upon the next reboot, the phone will download the encrypted MAC-specific
configuration file from configuration server (provided that the unencrypted MAC-specific
file is not present on the configuration server)
This method of encryption does not affect the implementation of the Mitel method of file
encryption.
Note: The startup.cfg file is not encrypted with this feature.
You can set the phone-specific encryption key using the configuration files only.
For more information about configuration file encryption, contact Mitel Technical Support.
CONFIGURING VENDOR CONFIGURATION FILE ENCRYPTION
Use the following procedure to configure vendor configuration file encryption on the IP Phones.
CONFIGURATION FILES
For specific parameters you can set in the configuration files for automatic update, see Appendix
A, the section, "Configuration Encryption Setting"
Encrypted Files on the IP Phone
on .
page A-296
7-6