Encrypted Files on the IP Phone
7-2
41-001160-04 Rev 02, Release 2.5
IP Phone Administrator Guide
Encrypted Files on the IP Phone
An encryption feature for the IP phone allows Service Providers the capability of
storing encrypted files on their server to protect against unauthorized access and
tampering of sensitive information (i.e., user accounts, login passwords,
registration information). Service Providers also have the capability of locking a
phone to use a specific server-provided configuration only.
Configuration File Encryption Method
Only a System Administrator can encrypt the configurations files for an IP Phone.
System Administrators use a password distribution scheme to manually
pre-configure or automatically configure the phones to use the encrypted
configuration with a unique key.
From a Microsoft Windows command line, the System Administrator uses an
Aastra-supplied encryption tool called "
anacrypt.exe
" to encrypt the
<MAC>.tuz
file.
This tool processes the plain text
<mac>.cfg
and
aastra.cfg
files and creates
triple-DES encrypted versions called
<mac>.tuz
and
aastra.tuz.
Encryption is
performed using a secret password that is chosen by the administrator.
The encryption tool is also used to create an additional encrypted tag file called
security.tuz
, which controls the decryption process on the IP phones. If
security.tuz
is present on the TFTP/FTP/HTTP server, the IP phones download it
and use it locally to decrypt the configuration information from the
aastra.tuz
and
<mac>.tuz
files. Because only the encrypted versions of the configuration files
need to be stored on the server, no plain-text configuration or passwords are sent
across the network, thereby ensuring security of the configuration data.
Note:
Aastra also supplies encryption tools to support Linux platforms
(
anacrypt.linux
) and Solaris platforms (
anacrypt.sunos
) if required.
Summary of Contents for 9143i Series
Page 4: ......
Page 16: ......
Page 20: ......
Page 72: ......
Page 92: ......
Page 306: ......
Page 686: ...Operational Features 5 380 41 001160 04 Rev 02 Release 2 5 IP Phone Administrator Guide...
Page 746: ......
Page 758: ......
Page 1062: ...Troubleshooting Parameters A 276 41 001160 04 Rev 02 Release 2 5 IP Phone Administrator Guide...
Page 1066: ......
Page 1100: ...Sample Configuration Files C 34 nnn nnnn nnn IP Phone Administrator Guide...
Page 1102: ...Sample Configuration Files C 36 nnn nnnn nnn IP Phone Administrator Guide...
Page 1108: ......
Page 1112: ......
Page 1116: ......
Page 1130: ......
Page 1138: ......
Page 1139: ......