Logo

Edge B configuration encyption

SOLVED
eric p
Occasional Visitor

Edge B configuration encyption

Hello

 

I can't find an answer in the KB or in the admin guide so I'm hoping someone can help me out.

 

i'm trying to provision an Edge B against an existing UCS server which offers encrypted files as outlined in various UCS admin manuals but I can't seem to find out if there is something similar for the Edge B

 

This document makes it look like the only way to encrypt configurations is for the phone to negotiate against https for the provisioner, is that the case?

 

Thank you

Message 1 of 3
1 ACCEPTED SOLUTION

Accepted Solutions
SteffenBaierUK
Polycom Employee & Community Manager

Re: Edge B configuration encyption

Hello @eric p ,

 

Welcome to the Poly Community.

 

I have run this by a colleague who is more knowledgeable on this than myself and he replied:

 

Yes, with ConfigURL (OBi provisioning), it's possible. You can refer them to these pages, from the OBi Provisioning Guide:

 

Using Encrypted Profiles talks about how to encrypt the config files and what ciphers are supported.

https://docs.poly.com/bundle/obi-deploy-630/page/OBiProvisioningGuide/OBiProvisioningGuide_DevConfig...

 

This talks about how to build the ConfigURL string to set the keys for decryption.

https://docs.poly.com/bundle/obi-deploy-630/page/OBiProvisioningGuide/OBiProvisioningGuide_DevConfig...

 

One part to call out, from the Using Encrypted Profiles page:

 

It is recommended to store the secret key in one of the SPRM x parameters and reference it in the ConfigURL with its corresponding $SPRM x macro.

 

Example:

 

SYNC -T=TPRM1 -A=aes -K=$SPRM0 -IV=$SPRM1 http://server.mycompany.com/profile.xml

 

Please ensure to provide some feedback if this reply has helped you so other users can profit from your experience.

Best Regards

Steffen Baier

----------------

If official support is required please check how to phone or open a case here

----------------
The title Poly Employee & Community Manager is a community setting and does not reflect my role. I am just a simple volunteer in the community like everybody else. All posts and words are my own & do not represent the views of Employer.

----------------


⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓SIGNATURE ⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓
Notice: This community forum is not an official Poly support resource, thus responses from Poly employees, partners, and customers alike are best-effort in attempts to share learned knowledge.
Please also ensure you always check the VoIP , Video Endpoint , Microsoft Voice , PSTN or other FAQ's in the different sections

View solution in original post

Message 2 of 3
2 REPLIES 2
SteffenBaierUK
Polycom Employee & Community Manager

Re: Edge B configuration encyption

Hello @eric p ,

 

Welcome to the Poly Community.

 

I have run this by a colleague who is more knowledgeable on this than myself and he replied:

 

Yes, with ConfigURL (OBi provisioning), it's possible. You can refer them to these pages, from the OBi Provisioning Guide:

 

Using Encrypted Profiles talks about how to encrypt the config files and what ciphers are supported.

https://docs.poly.com/bundle/obi-deploy-630/page/OBiProvisioningGuide/OBiProvisioningGuide_DevConfig...

 

This talks about how to build the ConfigURL string to set the keys for decryption.

https://docs.poly.com/bundle/obi-deploy-630/page/OBiProvisioningGuide/OBiProvisioningGuide_DevConfig...

 

One part to call out, from the Using Encrypted Profiles page:

 

It is recommended to store the secret key in one of the SPRM x parameters and reference it in the ConfigURL with its corresponding $SPRM x macro.

 

Example:

 

SYNC -T=TPRM1 -A=aes -K=$SPRM0 -IV=$SPRM1 http://server.mycompany.com/profile.xml

 

Please ensure to provide some feedback if this reply has helped you so other users can profit from your experience.

Best Regards

Steffen Baier

----------------

If official support is required please check how to phone or open a case here

----------------
The title Poly Employee & Community Manager is a community setting and does not reflect my role. I am just a simple volunteer in the community like everybody else. All posts and words are my own & do not represent the views of Employer.

----------------


⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓SIGNATURE ⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓⇓
Notice: This community forum is not an official Poly support resource, thus responses from Poly employees, partners, and customers alike are best-effort in attempts to share learned knowledge.
Please also ensure you always check the VoIP , Video Endpoint , Microsoft Voice , PSTN or other FAQ's in the different sections
Message 2 of 3
eric p
Occasional Visitor

Re: Edge B configuration encyption

This was very helpful.

Thank you

Message 3 of 3