Provisioning Capabilities; Configuration Profile - Linksys SPA921-NA Administrator's Manual

900 series
Table of Contents

Advertisement

Chapter 2
Getting Started

Provisioning Capabilities

The 900 Series phone provides for secure provisioning and remote upgrade. Provisioning is
achieved through configuration profiles transferred to the device via TFTP, HTTP, or HTTPS.
The 900 Series phone can be configured to automatically resync its internal configuration state
to a remote profile periodically and on power up. The automatic resyncs are controlled by
configuring the desired profile URL into the device.
The 900 Series phone accepts profiles in XML format, or alternatively in a proprietary binary
format, which is generated by a profile compiler tool available from Linksys. The 900 Series
phone supports up to 256-bit symmetric key encryption of profiles. For the initial transfer of
the profile encryption key (initial provisioning stage), the 900 Series phone can receive a
profile from an encrypted channel (HTTPS with client authentication), or it can resync to a
binary profile generated by the Linksys-supplied profile compiler. In the latter case, the profile
compiler can encrypt the profile specifically for the target 900 Series phone, without requiring
an explicit key exchange.
Remote firmware upgrade is achieved via TFTP or HTTP (firmware upgrades using HTTPS
are not supported). Remote upgrades are controlled by configuring the desired firmware image
URL into the 900 Series phone via a remote profile resync.
For further information about remote provisioning refer to the LVS SPA Provisioning Guide.

Configuration Profile

The 900 Series phone configuration profile can be either an XML file or a binary file with a
proprietary format.
The XML file consists of a series of elements (one per configuration parameter), encapsulated
within the element tags <flat-profile> ... </flat-profile>. The encapsulated elements specify
values for individual parameters. The following is an example of a valid XML profile:
Binary format profiles contain 900 Series phone parameter values and user access permissions
for the parameters. By convention, the profile uses the extension .cfg (for example,
spa2000.cfg). The Linksys Profile Compiler (SPC) tool compiles a plain-text file containing
parameter-value pairs into a properly formatted and encrypted .cfg file. The SPC tool is
available from Linksys for the Win32 environment and Linux-i386-elf environment. Requests
for SPC tools compiled on other platforms are evaluated on a case-by-case basis. Please contact
your Linksys sales representative for further information about obtaining the SPC tool.
The syntax of the plain-text file accepted by the profile compiler is a series of parameter-value
pairs, with the value in double quotes. Each parameter-value pair is followed by a semicolon.
The following is an example of a valid text source profile for input to the SPC tool:
Refer to the LVS SPA Provisioning Guide for further details.
Document Version 3.0
<flat-profile>
<Admin_Passwd>some secret</Admin_Passwd>
<Upgrade_Enable>Yes</Upgrade_Enable>
</flat-profile>
Admin_Passwd
"some secret";
Upgrade_Enable "Yes";
Linksys 900 Series IP Phone Administrator Guide
Provisioning
2-15

Advertisement

Table of Contents
loading

Table of Contents