User Manual

Configuring Security Features
347
ettings-autop&q=load
Phone User Interface
Configure AES keys.
Details of Configuration Parameters:
Parameters
Permitted Values
Default
auto_provision.aes_key_in_file
0 or 1
0
Description:
Enables or disables the Skype for Business phone to decrypt configuration files using the
encrypted AES keys.
0-Disabled
1-Enabled
If it is set to 1 (Enabled), the Skype for Business phone will download
<y0000000000xx_Security>.enc and <MAC_Security>.enc files during auto provisioning,
and then decrypts these files into the plaintext keys (e.g., key2, key3) respectively using the
phone built-in key (e.g., key1). The Skype for Business phone then decrypts the encrypted
configuration files using corresponding key (e.g., key2, key3).
If it is set to 0 (Disabled), the Skype for Business phone will decrypt the encrypted
configuration files using plaintext AES keys configured on the Skype for Business phone.
Web User Interface:
None
Phone User Interface:
None
auto_provision.aes_key_16.com
16 characters
Blank
Description:
Configures the plaintext AES key for decrypting the Common CFG file.
The valid characters contain: 0 ~ 9, A ~ Z, a ~ z and the following special characters are also
supported: # $ % * + , - . : = ? @ [ ] ^ _ { } ~.
Example:
auto_provision.aes_key_16.com = 0123456789abcdef
Web User Interface:
Settings->Auto Provision->Common AES Key
Phone User Interface:
Menu->Advanced ->Set AES Key->Common