Configuration File Encryption; Digital Certificates - Polycom IP 320 Administrator's Manual

Configuration File Encryption

Note
Central
(provisioning
server)

Digital Certificates

Configuration files (excluding the master configuration file), contact
directories, and configuration override files can all be encrypted.
Encrypted configuration files can be decrypted on the SoundPoint IP 32x, 33x, 430,
450, 550, 560, 650, and 670, the SoundStation IP 6000, and 7000, and the
Polycom VVX 1500 phones.
The master configuration file cannot be encrypted on the provisioning server. This
file is downloaded by the BootROM that does not recognize encrypted files. For
more information, refer to
For more information on encrypting configuration files including determining
whether an encrypted file is the same as an unencrypted file and using the
SDK to facilitate key generation, refer to
page C-4.
Configuration changes can be performed centrally at the provisioning server:
Configuration File: Specify the phone-specific contact directory and the
sip.cfg phone-specific configuration override file.
•
Configuration file: Change the encryption key.
<device>.cfg
•
Starting in May 2009, Polycom is installing a digital certificate on certain
SoundPoint IP phone models at the manufacturing facility. Over time, other
SoundPoint IP phone models as well as all SoundStation IP and Polycom VVX
phone models will have a digital certificate. Refer to "Technical Bulletin 37148:
Device Certificates on SoundPoint IP, SoundStation IP, and Polycom VVX
1500 Phones"at
http://www.polycom.com/support/voice/soundpoint_ip/VoIP_Technical
_Bulletins_pub.html .
This X.509 digital certificate is 'signed' by the Polycom Root CA and may be
used for a server to authenticate the phone when initiating Transport Layer
Security (TLS) based communications such as those used for HTTPS
provisioning and TLS SIP signaling encryption. The Polycom Root CA can be
downloaded from http://pki.polycom.com/pki
are set to expire on March 9, 2044.
Master Configuration Files
Encrypting Configuration Files
For more information, refer to
on page A-109.
For more information, refer to refer to
Configuration on page A-157.
Configuring Your System
on page A-2.
Encryption <encryption/>
Flash Parameter
. The X.509 digital certificates
on
4 - 95