Edge B configuration encyption

[Anonymous]

Hello

I can't find an answer in the KB or in the admin guide so I'm hoping someone can help me out.

i'm trying to provision an Edge B against an existing UCS server which offers encrypted files as outlined in various UCS admin manuals but I can't seem to find out if there is something similar for the Edge B

This document makes it look like the only way to encrypt configurations is for the phone to negotiate against https for the provisioner, is that the case?

Thank you

[SteffenBaierUK · Accepted solution]

Hello @eric p ,

Welcome to the Poly Community.

I have run this by a colleague who is more knowledgeable on this than myself and he replied:

Yes, with ConfigURL (OBi provisioning), it's possible. You can refer them to these pages, from the OBi Provisioning Guide:

Using Encrypted Profiles talks about how to encrypt the config files and what ciphers are supported.

https://docs.poly.com/bundle/obi-deploy-630/page/OBiProvisioningGuide/OBiProvisioningGuide_DevConfig...

This talks about how to build the ConfigURL string to set the keys for decryption.

https://docs.poly.com/bundle/obi-deploy-630/page/OBiProvisioningGuide/OBiProvisioningGuide_DevConfig...

One part to call out, from the Using Encrypted Profiles page:

It is recommended to store the secret key in one of the SPRM x parameters and reference it in the ConfigURL with its corresponding $SPRM x macro.

Example:

SYNC -T=TPRM1 -A=aes -K=$SPRM0 -IV=$SPRM1 http://server.mycompany.com/profile.xml

Please ensure to provide some feedback if this reply has helped you so other users can profit from your experience.

Best Regards

Steffen Baier

[Anonymous]

This was very helpful.

Thank you