Polycom CX5500 Administrator's Manual page 30

Polycom CX5500 Unified Conference Station Administrator's Guide
Note: Active and Passive FTP Methods
There are two types of FTP methods - active and passive. UC Software is not compatible with active
FTP.
Note: HTTP/HTTPS Authentication
Both digest and basic authentication are supported when using HTTP/HTTPS for UC Software. Only
digest authentication is supported when using HTTP by the Updater.
To guarantee software integrity, updating the software downloads only cryptographically signed UC
Software images. For HTTPS, widely recognized certificate authorities are trusted by the phone and
custom certificates can be added to the phone.
Web Info: To View Trusted Certificate Authorities
For more information, see the section
Using Custom Certificates With Polycom
As of SIP 3.2, Mutual Transport Layer Security (TLS) authentication is available. For more information,
see Support Mutual TLS
802.1X authentication is available. For more information, see
Digest Authentication for Microsoft Internet Information Services (IIS)
If you want to use digest authentication against the Microsoft Internet Information Services server:
Use Microsoft Internet Information Server 6.0 or later.
Digest authentication needs the user name and password to be saved in reversible encryption.
The user account on the server must have administrative privileges.
The wildcard must be set as MIME type; otherwise, the phone will not download *.cfg, *.ld and other required
files. This is because the Microsoft Internet Information Server cannot recognize these extensions and will
return a "File not found" error. To configure wildcard for MIME type, see
types on Microsoft
For more information, see
Polycom, Inc.
Authentication.
Support.
Digest Authentication in IIS 6.0
Trusted Certificate Authority List
Phones.
Support 802.1X
IIS 6.0 does not serve unknown MIME
on Microsoft TechNet.
and Technical Bulletin 17877:
Authentication.
1.1.0
30