Polycom IP 320 Administrator's Manual page 41

Note Setting Option 66 to tftp://192.168.9.10 has the effect of forcing a TFTP download.
Using a TFTP URL (for example, tftp://provserver.polycom.com) has the same
effect.
Note Both digest and basic authentication are supported when using HTTP/S for the SIP
application. Only digest authentication is supported when using HTTP by the
BootROM. If the Server Type is configured as HTTPS, the BootROM will contact
the same address and apply the same username and password to authentication
challenges only the protocol used will be HTTP. No SSL negotiation will take place,
so servers that do not allow unsecured HTTP connections will not be able to
provision files.
For downloading the BootROM and application images to the phone, the
secure HTTPS protocol is not available. To guarantee software integrity, the
BootROM will only download cryptographically signed BootROM or
application images. For HTTPS, widely recognized certificate authorities are
trusted by the phone (refer to
and custom certificates can be added to the phone (refer to "Technical Bulletin
17877: Using Custom Certificates With SoundPoint IP, SoundStation IP, and É
Phones" at
http://www.polycom.com/usa/en/support/voice/soundpoint_ip/VoIP_T
echnical_Bulletins_pub.html .
As of SIP 3.2, Mutual Transport Layer Security (TLS) authentication is
available. For more information, refer to
4-97.
If you want to use digest authentication against the Microsoft Internet Information
Note
Services server:
• Use Microsoft Internet Information Server 6.0 or later.
• Digest authentication needs the user name and password to be saved in
reversible encryption.
• The user account on the server must have administrative privileges.
• The wildcard must be set as MIME type; otherwise the phone will not download
*.cfg, *.ld and other required files. This is due to the fact that the Microsoft
Internet Information Server cannot recognize these extensions and will return a
"File not found" error. To configure wildcard for MIME type, refer to
http://support.microsoft.com/kb/326965
For more information, refer to
http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/809
552a3-3473-48a7-9683-c6df0cdfda21.mspx?mfr=true
Trusted Certificate Authority List
Mutual TLS Authentication
.
.
Setting up Your System
on page C-1)
on page
3 - 5