Procedure To Encrypt Configuration Files; To Configure The Common Aes Key Via Web User Interface - Yealink SIP-T2xP Administration Manual

Administrator's Guide for SIP-T2xP IP Phones
The IP phone can download the encrypted configuration files from the configuration
server to protect against unauthorized access and tampering of sensitive information
(i.e., login passwords, registration information). Configuration files can be encrypted
using a command line tool. The encryption algorithm is AES 128. From a Microsoft
Windows command line, an administrator can use the Yealink-supplied encryption tool
called "EncryptUtilityWindows.exe" to encrypt the <y0000000000xx>.cfg and
<MAC>.cfg files respectively.
Note
Yealink also supplies an encryption tool (EncryptUtilityLinux.exe) to support Linux
platforms if required.
You can also encrypt the configuration files using the Yealink Configuration Conversion
Tool. Refer to the Yealink Configuration Conversion Tool User Guide for more information.
The filename extension of the encrypted configuration files must be .cfg. The common
AES key is used to encrypt and decrypt the <y0000000000xx>.cfg file and the
MAC-Oriented AES key is used to encrypt decrypt the <MAC>.cfg file. The AES keys
must be configured on the phone before downloading the encrypted configuration files.
The AES keys must be 16 characters.

Procedure to Encrypt Configuration Files

To encrypt the <y0000000000xx>.cfg file:
1. Save the ―EncryptUtilityWindows.exe‖ tool and <y0000000000xx>.cfg file to the
same directory (i.e., D:\).
2. Open a command line window application (i.e., DOS window).
3. Enter the following command, and then press the <Enter> key.
D:EncryptUtilityWindows.exe 123456789abcdef0 e F:\y000000000000.cfg
D:\y000000000000.cfg
#D:EncryptUtilityWindows.exe <a 16-character secret key> e <a new
directory and file name for the encrypted configuration file> <the
directory and file name of the configuration file to be encrypted>
4. Save the encrypted configuration file to the root directory of the configuration
server.

To configure the common AES key via web user interface:

1. Click on Upgrade->Advanced.
2. Enter the secret key (i.e., 123456789abcdef0) in the Common AES Key field.
3. Click Confirm to save the change.
The way for encrypting the <MAC>.cfg file is the same as the < y0000000000xx >.cfg
file, and then configure the MAC-Oriented AES key in the MAC-Oriented AES Key field.
78