Cisco SPA525G Administration Guide - Page 136

Provisioning Capabilities, Provisioning Configuration from Phone Keypad

Page 136 highlights

7 Provisioning Basics Provisioning Capabilities Provisioning Capabilities The Cisco IP phones provide for secure provisioning and remote upgrade. Provisioning is achieved through configuration profiles transferred to the device via TFTP, HTTP, or HTTPS. The Cisco IP phones can be configured to automatically resync their internal configuration state to a remote profile periodically and on power up. The automatic resyncs are controlled by configuring the desired profile URL into the device. The SPA9000 accepts profiles in XML format, or alternatively in a proprietary binary format, which is generated by a profile compiler tool, SIP Profile Compiler (SPC), available from Cisco. The SPA9000 supports up to 256-bit symmetric key encryption of profiles. For the initial transfer of the profile encryption key (initial provisioning stage), the SPA9000 can receive a profile from an encrypted channel (HTTPS with client authentication), or it can resync to a binary profile generated by the Cisco SIP profile compiler. In the latter case, the SIP profile compiler can encrypt the profile specifically for the target SPA9000, without requiring an explicit key exchange. Remote firmware upgrade is achieved via TFTP or HTTP or HTTPS (TFTP or HTTP for WIP310). Remote upgrades are controlled by configuring the desired firmware image URL into the Cisco IP phone via a remote profile resync. Provisioning Configuration from Phone Keypad Remote provisioning can be performed from a phone keypad. After the user enters the IP address of the provisioning server, the unit resyncs to a known path name. This feature enables service providers to have VARs install and provision Cisco phones. 134 Cisco SPA and Wireless IP Phone Administration Guide

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250
  • 251
  • 252
  • 253
  • 254
  • 255
  • 256
  • 257
  • 258
  • 259
  • 260
  • 261
  • 262
  • 263
  • 264
  • 265
  • 266
  • 267
  • 268
  • 269
  • 270
  • 271
  • 272
  • 273
  • 274
  • 275
  • 276
  • 277
  • 278
  • 279
  • 280

Provisioning Basics
Provisioning Capabilities
134
Cisco SPA and Wireless IP Phone Administration Guide
7
Provisioning Capabilities
The Cisco IP phones provide for secure provisioning and remote upgrade.
Provisioning is achieved through configuration profiles transferred to the device
via TFTP, HTTP, or HTTPS.
The Cisco IP phones can be configured to automatically resync their internal
configuration state to a remote profile periodically and on power up. The
automatic resyncs are controlled by configuring the desired profile URL into the
device.
The SPA9000 accepts profiles in XML format, or alternatively in a proprietary
binary format, which is generated by a profile compiler tool, SIP Profile Compiler
(SPC),
available from Cisco. The SPA9000 supports up to 256-bit symmetric key
encryption of profiles. For the initial transfer of the profile encryption key (initial
provisioning stage), the SPA9000 can receive a profile from an encrypted channel
(HTTPS with client authentication), or it can resync to a binary profile generated by
the Cisco SIP profile compiler. In the latter case, the SIP profile compiler can
encrypt the profile specifically for the target SPA9000, without requiring an
explicit key exchange.
Remote firmware upgrade is achieved via TFTP or HTTP or HTTPS (TFTP or
HTTP for WIP310). Remote upgrades are controlled by configuring the desired
firmware image URL into the Cisco IP phone via a remote profile resync.
Provisioning Configuration from Phone Keypad
Remote provisioning can be performed from a phone keypad. After the user enters
the IP address of the provisioning server, the unit resyncs to a known path name.
This feature enables service providers to have VARs install and provision Cisco
phones.