Yealink SIP-T3 Administrator's Manual page 134

Default 0
Parameter static.auto_provision.aes_key_in_file
Description It configures how the phone decrypts files.
0-The phone will decrypt the encrypted configuration files using plaintext AES keys configured on the
phone.
1-The phone determines whether the file is an encrypted file generated in RSA mode. If yes, the
phone will decrypt the encrypted configuration file using the phone built-in RSA private key or self-
Permitted
define RSA private key. If no, the phone will request the <xx>.enc file first and decrypt the file using
Values
RSA private key, when there is no <xx>.enc file, the phone will request the <xx_Security>.enc file.
Then the phone decrypt this file into the plaintext key (e.g., key2) using the phone built-in AES key
(e.g., key1). The IP phone then decrypts the encrypted configuration file using the corresponding key
(e.g., key2).
Default 0
Parameter static.auto_provision.aes_key.com
It configures the plaintext AES key for encrypting/decrypting the Common CFG/Custom CFG file.
The valid characters contain: 0 ~ 9, A ~ Z, a ~ z and the following special characters are also sup-
ported: # $ % * + , - . : = ? @ [ ] ^ _ { } ~.
Example:
Description
static.auto_provision.aes_key.com = 0123456789abcdef
Note: For decrypting, it works only if "static.auto_provision.aes_key_in_file" is set to 0. If the down-
loaded MAC-Oriented file is encrypted and the parameter "static.auto_provision.aes_key.mac" is left
blank, the phone will try to encrypt/decrypt the MAC-Oriented file using the AES key configured by the
parameter "static.auto_provision.aes_key.com".
Permitted
16/32 characters
Values
Default Blank
Web UI Settings > Auto Provision > Common AES Key
Color Screen Phones:
Menu > Advanced (default password: admin) > Auto Provision > Common AES
CP925/CP935W:
Phone UI
More > Advanced (default password: admin) > Auto Provision > Common AES
Black-and-white Screen Phones:
Menu > Settings > Advanced Settings (default password: admin) > Auto Provision > Common AES
Parameter static.auto_provision.aes_key.mac
It configures the plaintext AES key for encrypting/decrypting the MAC-Oriented files (<MAC>.cfg,
<MAC>-local.cfg and <MAC>-contact.xml).
The valid characters contain: 0 ~ 9, A ~ Z, a ~ z and the following special characters are also sup-
ported: # $ % * + , - . : = ? @ [ ] ^ _ { } ~.
Description
Example:
static.auto_provision.aes_key.mac = 0123456789abmins
Note: For decrypting, it works only if "static.auto_provision.aes_key_in_file" is set to 0. If the down-
Security Features
<y0000000000xx>.cfg
<y0000000000xx>.cfg
<y0000000000xx>.cfg
128