Aastra 6730i Administrator's Manual page 83

Authentication Support for HTTP/HTTPS Download Methods for BroadSoft Client Management System (CMS)
The IP Phones have authentication support as referenced in RFC 2617 when using HTTP or HTTPS as download protocols.
If a 5i Series phone is challenged by an HTTP or HTTPS server when the server attempts to download the aastra.cfg file, the
phone automatically sends "aastra" as the default Username and Password back to the server. For more information about
this feature, see Chapter 5, the section,
Client Management System (CMS)"
Using HTTPS via the Aastra Web UI
HTTPS is enabled by default on the IP phones. When you open a browser window and enter an IP address or host name for
a phone using HTTP, a server redirection occurs which automatically converts an HTTP connection to an HTTPS connec-
tion. After the redirection, a "Security Alert" certificate window displays alerting the user that information exchanged with
the phone cannot be viewed or changed by others. Accepting the certificate then forwards you to the phone's Web UI.
Notes:
• The private key and certificate generate outside the phone and embed in the phone firmware for use by the HTTPS
server during the SSL handshake.
• Using the configuration files, the IP phone UI, or the Aastra Web UI, you can configure the following regarding HTTPS:
- Specify HTTPS security client method to use (TLS 1.0 or SSL 3.0)
- Enable or disable HTTP to HTTPS server redirect function
- HTTPS server blocking of XML HTTP POSTS to the phone
Reference
For more information on configuring the HTTPS protocol, see Chapter 4, the sections:
• "Configuring the Configuration Server Protocol"
• "HTTPS Client/Server Configuration"
41-001343-02 REV05 – 07.2014
"Authentication Support for HTTP/HTTPS Download Methods, used with BroadSoft
on page 5-277.
on page 4-87
on page 4-33
Configuration Methods
2-8