Solved: Edge B configuration encyption - HP Support Community

Anonymous · ‎05-05-2023

Hello

I can't find an answer in the KB or in the admin guide so I'm hoping someone can help me out.

i'm trying to provision an Edge B against an existing UCS server which offers encrypted files as outlined in various UCS admin manuals but I can't seem to find out if there is something similar for the Edge B

This document makes it look like the only way to encrypt configurations is for the phone to negotiate against https for the provisioner, is that the case?

Thank you

SteffenBaierUK · ‎05-05-2023

Hello @eric p ,

Welcome to the Poly Community.

I have run this by a colleague who is more knowledgeable on this than myself and he replied:

Yes, with ConfigURL (OBi provisioning), it's possible. You can refer them to these pages, from the OBi Provisioning Guide:

Using Encrypted Profiles talks about how to encrypt the config files and what ciphers are supported.

https://docs.poly.com/bundle/obi-deploy-630/page/OBiProvisioningGuide/OBiProvisioningGuide_DevConfig...

This talks about how to build the ConfigURL string to set the keys for decryption.

https://docs.poly.com/bundle/obi-deploy-630/page/OBiProvisioningGuide/OBiProvisioningGuide_DevConfig...

One part to call out, from the Using Encrypted Profiles page:

It is recommended to store the secret key in one of the SPRM x parameters and reference it in the ConfigURL with its corresponding $SPRM x macro.

Example:

SYNC -T=TPRM1 -A=aes -K=$SPRM0 -IV=$SPRM1 http://server.mycompany.com/profile.xml

Please ensure to provide some feedback if this reply has helped you so other users can profit from your experience.

Best Regards

Steffen Baier

------------------------------------------------
Notice: I am an HP Poly employee but all replies within the community are done as a volunteer outside of my day role. This community forum is not an official HP Poly support resource, thus responses from HP Poly employees, partners, and customers alike are best-effort in attempts to share learned knowledge.
If you need immediate and/or official assistance for former Poly\Plantronics\Polycom please open a service ticket through your support channels
For HP products please check HP Support.

Please also ensure you always check the General VoIP , Video Endpoint , UC Platform (Microsoft) , PSTN

View solution in original post

SteffenBaierUK · ‎05-05-2023

Hello @eric p ,

Welcome to the Poly Community.

I have run this by a colleague who is more knowledgeable on this than myself and he replied:

Yes, with ConfigURL (OBi provisioning), it's possible. You can refer them to these pages, from the OBi Provisioning Guide:

Using Encrypted Profiles talks about how to encrypt the config files and what ciphers are supported.

https://docs.poly.com/bundle/obi-deploy-630/page/OBiProvisioningGuide/OBiProvisioningGuide_DevConfig...

This talks about how to build the ConfigURL string to set the keys for decryption.

https://docs.poly.com/bundle/obi-deploy-630/page/OBiProvisioningGuide/OBiProvisioningGuide_DevConfig...

One part to call out, from the Using Encrypted Profiles page:

It is recommended to store the secret key in one of the SPRM x parameters and reference it in the ConfigURL with its corresponding $SPRM x macro.

Example:

SYNC -T=TPRM1 -A=aes -K=$SPRM0 -IV=$SPRM1 http://server.mycompany.com/profile.xml

Please ensure to provide some feedback if this reply has helped you so other users can profit from your experience.

Best Regards

Steffen Baier

------------------------------------------------
Notice: I am an HP Poly employee but all replies within the community are done as a volunteer outside of my day role. This community forum is not an official HP Poly support resource, thus responses from HP Poly employees, partners, and customers alike are best-effort in attempts to share learned knowledge.
If you need immediate and/or official assistance for former Poly\Plantronics\Polycom please open a service ticket through your support channels
For HP products please check HP Support.

Please also ensure you always check the General VoIP , Video Endpoint , UC Platform (Microsoft) , PSTN

Anonymous · ‎05-05-2023

This was very helpful.

Thank you

Edge B configuration encyption

Create an account on the HP Community to personalize your profile and ask a question