3. The device is now switched to encryption mode, and it downloads the encrypted version of the standardconfiguration file again by changing the file extension to ".enc".SIP PhoneDownload the initialconfiguration fileDownload the encrypteddevice configuration fileProvisioning ServerHTTP GET x.x.x.x/Config{MAC}.cfgHTTP GET x.x.x.x/{MODEL}.cfgKey obtainedDownload the deviceconfiguration fileHTTP GET x.x.x.x/Config{MAC}.encEncrypted fileNote• When more than one device configuration file is being used, the device downloads the encryptedversion of all the device configuration files.2.6.2 Using HTTPS When Transferring Configuration FilesHTTPS can be used to secure provisioning connections. This method uses TLS to establish a secureconnection, which involves client/server authentication using an x.509 certificate.Note• The following certificates and keys are installed on the unit:– Client certificate and private key– Root CA certificate• Supported certificate format: ".pem"Root certificate updatingRoot certificates can be loaded or updated via provisioning by specifying the certificates’ URL in the initialconfiguration file. The device checks if the root certificate URL has changed and then downloads the rootcertificate sequentially.58 Administrator Guide Document Version 2015-012.6.2 Using HTTPS When Transferring Configuration Files
