Configuring Security Features3192. Click Browse to select the certificate (*.pem and *.cer) from your local system.3. Click Upload to upload the certificate.A dialog box pops up to prompt “Success: The Server Certificate has been loaded!Rebooting, please wait…”.Encrypting Configuration FilesEncrypted configuration files can be downloaded from the provisioning server to protect againstunauthorized access and tampering of sensitive information (e.g., login passwords, registrationinformation). Yealink supplies a configuration encryption tool for encrypting configuration files.The encryption tool encrypts plaintext .cfg and .cfg files (one by oneor in batch) using 16-character symmetric keys (the same or different keys for configuration files)and generates encrypted configuration files with the same file name as before. This tool alsoencrypts the plaintext 16-character symmetric keys using a fixed key, which is the same as theone built in the Skype for Business phone, and generates new files named as .enc(xx indicates the name of the configuration file, for example, y000000000028_Security.enc fory000000000028.cfg file). This tool generates another new file named as Aeskey.txt to store theplaintext 16-character symmetric keys for each configuration file.For a Microsoft Windows platform, you can use a Yealink-supplied encryption tool"Config_Encrypt_Tool.exe" to encrypt the .cfg and .cfg filesrespectively.NoteFor security reasons, administrator should upload encrypted configuration files,.enc and/or .enc files to the root directory of theprovisioning server. During auto provisioning, the Skype for Business phone requests todownload .cfg file first. If the downloaded configuration file is encrypted, theSkype for Business phone will request to download .enc file (ifenabled) and decrypt it into the plaintext key (e.g., key2) using the built-in key (e.g., key1). Thenthe Skype for Business phone decrypts .cfg file using key2. After decryption,the Skype for Business phone resolves configuration files and updates configuration settingsonto the Skype for Business phone system.Yealink also supplies a configuration encryption tool (yealinkencrypt) for Linux platform ifrequired. For more information, refer toYealink Configuration Encryption Tool User Guide.
