Yealink SIP-T2XP Administrator's Manual page 491

Procedure
Decryption method can be configured using the configuration files.
Configuration File
Local
Details of Configuration Parameters:
Parameters
auto_provision.aes_key_in_file
Description:
Enables or disables the IP phone to decrypt configuration files using the encrypted
AES keys.
0-Disabled
1-Enabled
If it is set to 1 (Enabled), the IP phone will download <y0000000000xx_Security>.enc
and <MAC_Security>.enc files during auto provisioning, and then decrypts these
files into the plaintext keys (e.g., key2, key3) respectively using the phone built-in key
(e.g., key1). The IP phone then decrypts the encrypted configuration files using
corresponding key (e.g., key2, key3).
If it is set to 0 (Disabled), the IP phone will decrypt the encrypted configuration files
using plaintext AES keys configured on the IP phone.
Web User Interface:
None
Phone User Interface:
None
<y0000000000xx>.cfg
Web User Interface
Configuring Security Features
Configure the decryption method.
Parameter:
auto_provision.aes_key_in_file
Configure AES keys.
Parameters:
auto_provision.aes_key_16.com
auto_provision.aes_key_16.mac
auto_provision.update_file_mode
Configure AES keys.
Navigate to:
http://<phoneIPAddress>/servlet?p
=settings-autop&q=load
Permitted Values
0 or 1
Default
0
473