Cisco SPA962-NA Administration Guide - Page 43

Provisioning Capabilities, Configuration Profile, LVS SPA Provisioning Guide

Page 43 highlights

Chapter 2 Getting Started Provisioning Provisioning Capabilities The 900 Series phone provides for secure provisioning and remote upgrade. Provisioning is achieved through configuration profiles transferred to the device via TFTP, HTTP, or HTTPS. The 900 Series phone can be configured to automatically resync its internal configuration state to a remote profile periodically and on power up. The automatic resyncs are controlled by configuring the desired profile URL into the device. The 900 Series phone accepts profiles in XML format, or alternatively in a proprietary binary format, which is generated by a profile compiler tool available from Linksys. The 900 Series phone supports up to 256-bit symmetric key encryption of profiles. For the initial transfer of the profile encryption key (initial provisioning stage), the 900 Series phone can receive a profile from an encrypted channel (HTTPS with client authentication), or it can resync to a binary profile generated by the Linksys-supplied profile compiler. In the latter case, the profile compiler can encrypt the profile specifically for the target 900 Series phone, without requiring an explicit key exchange. Remote firmware upgrade is achieved via TFTP or HTTP (firmware upgrades using HTTPS are not supported). Remote upgrades are controlled by configuring the desired firmware image URL into the 900 Series phone via a remote profile resync. For further information about remote provisioning refer to the LVS SPA Provisioning Guide. Configuration Profile The 900 Series phone configuration profile can be either an XML file or a binary file with a proprietary format. The XML file consists of a series of elements (one per configuration parameter), encapsulated within the element tags ... . The encapsulated elements specify values for individual parameters. The following is an example of a valid XML profile: some secret Yes Binary format profiles contain 900 Series phone parameter values and user access permissions for the parameters. By convention, the profile uses the extension .cfg (for example, spa2000.cfg). The Linksys Profile Compiler (SPC) tool compiles a plain-text file containing parameter-value pairs into a properly formatted and encrypted .cfg file. The SPC tool is available from Linksys for the Win32 environment and Linux-i386-elf environment. Requests for SPC tools compiled on other platforms are evaluated on a case-by-case basis. Please contact your Linksys sales representative for further information about obtaining the SPC tool. The syntax of the plain-text file accepted by the profile compiler is a series of parameter-value pairs, with the value in double quotes. Each parameter-value pair is followed by a semicolon. The following is an example of a valid text source profile for input to the SPC tool: Admin_Passwd "some secret"; Upgrade_Enable "Yes"; Refer to the LVS SPA Provisioning Guide for further details. Document Version 3.0 Linksys 900 Series IP Phone Administrator Guide 2-15

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164

2-15
Linksys 900 Series IP Phone Administrator Guide
Document Version 3.0
Chapter 2
Getting Started
Provisioning
Provisioning Capabilities
The 900 Series phone provides for secure provisioning and remote upgrade. Provisioning is
achieved through configuration profiles transferred to the device via TFTP, HTTP, or HTTPS.
The 900 Series phone can be configured to automatically resync its internal configuration state
to a remote profile periodically and on power up. The automatic resyncs are controlled by
configuring the desired profile URL into the device.
The 900 Series phone accepts profiles in XML format, or alternatively in a proprietary binary
format, which is generated by a profile compiler tool available from Linksys. The 900 Series
phone supports up to 256-bit symmetric key encryption of profiles. For the initial transfer of
the profile encryption key (initial provisioning stage), the 900 Series phone can receive a
profile from an encrypted channel (HTTPS with client authentication), or it can resync to a
binary profile generated by the Linksys-supplied profile compiler. In the latter case, the profile
compiler can encrypt the profile specifically for the target 900 Series phone, without requiring
an explicit key exchange.
Remote firmware upgrade is achieved via TFTP or HTTP (firmware upgrades using HTTPS
are not supported). Remote upgrades are controlled by configuring the desired firmware image
URL into the 900 Series phone via a remote profile resync.
For further information about remote provisioning refer to the
LVS SPA Provisioning Guide
.
Configuration Profile
The 900 Series phone configuration profile can be either an XML file or a binary file with a
proprietary format.
The XML file consists of a series of elements (one per configuration parameter), encapsulated
within the element tags <flat-profile> … </flat-profile>. The encapsulated elements specify
values for individual parameters. The following is an example of a valid XML profile:
<flat-profile>
<Admin_Passwd>some secret</Admin_Passwd>
<Upgrade_Enable>Yes</Upgrade_Enable>
</flat-profile>
Binary format profiles contain 900 Series phone parameter values and user access permissions
for the parameters. By convention, the profile uses the extension .cfg (for example,
spa2000.cfg). The Linksys Profile Compiler (SPC) tool compiles a plain-text file containing
parameter-value pairs into a properly formatted and encrypted .cfg file. The SPC tool is
available from Linksys for the Win32 environment and Linux-i386-elf environment. Requests
for SPC tools compiled on other platforms are evaluated on a case-by-case basis. Please contact
your Linksys sales representative for further information about obtaining the SPC tool.
The syntax of the plain-text file accepted by the profile compiler is a series of parameter-value
pairs, with the value in double quotes. Each parameter-value pair is followed by a semicolon.
The following is an example of a valid text source profile for input to the SPC tool:
Admin_Passwd
“some secret”;
Upgrade_Enable “Yes”;
Refer to the
LVS SPA Provisioning Guide
for further details.