Secure Https Resync; Basic Https Resync - Cisco 6800 Series Provisioning Manual

Provisioning Examples
For example, assume GPP_B is defined as
The Profile_Rule has the value:
tftp://prov.telco.com/cisco/$B/$MA.cfg
When the device resyncs and the macros are expanded, the phone with a MAC address of 000e08012345
requests the profile with the name that contains the device MAC address at the following URL:
tftp://prov.telco.com/cisco/Dj6Lmp23Q/000e08012345.cfg

Secure HTTPS Resync

These mechanisms are available on the phone for resyncing by using a secure communication process:

• Basic HTTPS Resync

• HTTPS with Client Certificate Authentication
• HTTPS Client Filtering and Dynamic Content
Related Topics
Basic HTTPS Resync, on page 51
HTTPS with Client Certificate Authentication, on page 53
HTTPS Client Filtering and Dynamic Content, on page 54
Basic HTTPS Resync
HTTPS adds SSL to HTTP for remote provisioning so that the:
• The phone can authenticate the provisioning server.
• Provisioning server can authenticate the phone.
• Confidentiality of information exchanged between the phone and the provisioning server is ensured.
SSL generates and exchanges secret (symmetric) keys for each connection between the phone and the server,
using public/private key pairs that are pre-installed in the phone and the provisioning server.
On the client side, the phone does not require any special configuration setting on the server to be able to
resync using HTTPS. The Profile_Rule parameter syntax for using HTTPS with the GET method is similar
to the syntax that is used for HTTP or TFTP. If a standard web browser can retrieve a profile from a your
HTTPS server, the phone should be able to do so as well.
In addition to installing a HTTPS server, a SSL server certificate that Cisco signs must be installed on the
provisioning server. The devices cannot resync to a server that is using HTTPS unless the server supplies a
Cisco-signed server certificate. Instructions for creating signed SSL Certificates for Voice products can be
found at https://supportforums.cisco.com/docs/DOC-9852.
Related Topics
Secure HTTPS Resync, on page 51
.
Dj6Lmp23Q
Cisco IP Phone 6800 Series Multiplatform Phones Provisioning Guide
Secure HTTPS Resync
51