Configuration Profile - Linksys SPA941 Administration Manual

•
Provisioning is achieved through configuration profiles requested by the device from a
provisioning server, via TFTP, HTTP or HTTPS.
•
No end-user intervention is required to initiate or complete a profile update or firmware upgrade.
The SPA941 is programmed to resync with the server on power-up and periodically thereafter.
•
Remote upgrade is also achieved via TFTP, HTTP or HTTPS.
•
General purpose parameters are provided as an additional aid to service providers in managing
the provisioning process. These parameters are often used to hold encryption keys, file path
locations, or provisioning state.
•
The SPA can be configured to resync its internal configuration state to a remote profile
periodically and on power up. Additional triggers are available, including SIP NOTIFY messages,
registration state, and provisioning state.
•
256-bit symmetric key encryption of profiles.
•
Supports targeted (end-point unique) key-less profile encryption.
•
The SPA941 supports a secure first-time provisioning mechanism using SSL functionality. For
this purpose, each SPA941 is loaded with a unique client certificate at manufacturing time. The
certificate identifies each device by MAC address, Serial Number, and Product Name. This
feature can be used in conjunction with a properly configured HTTPS provisioning server, to
provide for an additional level of security in provisioning units.
•
Profile resyncs and firmware upgrades are attempted only when the SPA is idle, as they may
trigger a software reboot, as a result of changes in parameter values. A configurable override
delay is available to force a resync after a predetermined grace period.

Configuration Profile

The SPA941 configuration profile can take one of two forms: a compact binary file, or an XML text file. By
convention, the profile is named with the extension ".cfg" (e.g. spa941.cfg). In the case of a binary profile,
the Linksys Profile Compiler tool (SPC) is provided by Linksys for compiling a plain-text file containing
parameter-value pairs into a properly formatted (and optionally encrypted) CFG file. The spc tool is
available from Linksys for the Win32 environment (spc.exe), and the Linux-i386-elf environment (spc-
linux-i386-static). In the case of an XML text profile, the XML file itself is fed to the SPA941 directly,
without prior compilation into a binary form. The XML text profile function is an advanced feature,
described in the SPA Provisioning Guide.
The syntax of the source plain-text file accepted by the Linksys Profile Compiler is a series of parameter-
value pairs, with the value enclosed in double quotes. Each parameter-value pair is followed by a
semicolon, thus:
Parameter_Name "parameter value";
For example:
© 2003 - 2005 Linksys, a Division of Cisco Systems Proprietary (See Copyright Notice on Page 2)
DRAFT
82