Grandstream Networks, Inc. GXV3140 USER MANUAL FIRMWARE VERSION 1.0.1.18 Updated: 09/2009 Grandstream Networks, Inc. GXV3140 IP Multimedia Phone. Grandstream Networks, Inc. GXV3140 USER MANUAL FIRMWARE VERSION 1.0.3.24 Updated: 04/2010. Grandstream Networks, Inc. IP Multimedia Phone. FIRMWARE VERSION 1.0.3.74 GXV3175 USER MANUAL Page 9 of 139 WELCOME Thank you for purchasing Grandstream GXV3175 IP Multimedia Phone. GXV3175 IP Multimedia Phone represents the future in personal IP multimedia communication as the ultimate desktop multimedia phone.
Grandstream Networks, Inc.
XML Provisioning Guide
GXV3140/GXV3175 IP Multimedia Phone
GXV21XX/GXP14XX Enterprise IP Phone
HT50x Analog Telephone Adapters
GXW40xx FXS Analog IP Gateways
www.grandstream.com | |
TABLE OF CONTENTS | |
XML PROVISIONING GUIDE | |
OVERVIEW............................................................................. | 3 |
PROVISIONING FLOW..................................................................... | 3 |
XML SCHEMA AND EXAMPLE FILE............................................................ | 3 |
XML FILE ENCRYPTION .................................................................... | 4 |
SECURE PROVISIONING................................................................... | 5 |
TABLE OF FIGURES | |
XML PROVISIONING GUIDE | |
FIGURE 1: PROVISIONING FLOW. ............................................................ | 3 |
FIGURE 2: USING WEB UI TO DEFINE THE XML CONFIGURATION FILE PASSWORD ....................... | 4 |
Grandstream Networks, Inc. | XML Provisioning Guide | Page 2 of 5 |
www.grandstream.com | Last Updated: 7/2011 |
OVERVIEW
The XML provisioning system allows Grandstream phones to perform configuration updates via XML configuration files. In addition, the XML provisioning implementation may also allow generic XML configuration file on top of the MAC based configuration file.
Note: Currently, XML provisioning is supported on the following Grandstream products:
•GXV3140 IP Multimedia Phone
•GXV3175 IP Multimedia Phone
•GXP21XX/GXP14XX Enterprise IP phones
•HT50X Analog Telephone Adapters
•GXW40XX FXS Analog IP Gateways
PROVISIONING FLOW
Request | Parse and | Request XML |
Start | config file | |
legacy | apply new | |
cfgMAC.xml | ||
provisioning | config file | configurations |
cfgMAC |
Parse and
Done
apply new configurations
Figure 1: Provisioning Flow.
The provision program on the phone will apply and reload the settings after downloading the legacy binary cfgMAC config file. This means that a provision/re-direction server can redirect the device to a XML
provision server without reboot. It can also be used to send the XML encryption password.
XML SCHEMA AND EXAMPLE FILE
The general XML syntax consists of a list of name-value pairs. P-Value is the element and the value of the element is represents the value for that particular configuration that the corresponding P-Value represents. For the complete P-value list, please refer to the legacy configuration templates at http://www.grandstream.com/index.php/support/tools
Example XML configuration file (cfgxxxxxxxxxxxx.xml):
<?xml version='1.0' encoding='UTF-8' ?>
Grandstream Networks, Inc. | XML Provisioning Guide | Page 3 of 5 |
www.grandstream.com | Last Updated: 7/2011 |
<gs_provision version='1'> <mac>000b82123456</mac> <config version='1'>
<P271>0</P271> <P270>Account name</P270>
</config> </gs_provision>
The mac element is not mandatory. It is designed this way because not all provision systems support MAC address. If it is present, the provision program will validate the mac element with the actual MAC address on the device.
XML FILE ENCRYPTION
The XML configuration file may be encrypted using AES-256-CBC algorithm. The encryption password is defined in P1359 (XML Config File Password) of the configuration file. The encryption may use salt to enhance security. The algorithm to derive the key and IV from a password is the same as the one used by OpenSSL:
The OpenSSL command-line to encrypt the file is as follows:
Openssl enc –e –aes-256-cbc –k password –in config.xml –out cfgxxxxxxxxxxxx.xml
Alternatively, users can also set the XML Config File Password in the web UI of the phone.
Figure 2: Using web UI to define the XML Configuration File Password
When the XML configuration file is encrypted using this method, the phone would only be able to decrypt and parse the file if user set the XML Config File Password in P1349 of binary configuration file or in the web UI.
Grandstream Networks, Inc. | XML Provisioning Guide | Page 4 of 5 |
www.grandstream.com | Last Updated: 7/2011 |
SECURE PROVISIONING
Although the XML config file can be encrypted and the encryption algorithm itself is regarded as safe and strong by using AES with 256-bit key length, it remains a question on how to bootstrap and provision the initial XML encryption password. There are several methods to provide solutions to this:
1.Use legacy binary config file to set the initial XML encryption password. The legacy binary file is encrypted and it generally regarded safe.
2.Use HTTPS and use client side authentication. This is the industry standard approach and has the strongest safety.
Grandstream Networks, Inc. | XML Provisioning Guide | Page 5 of 5 Hp laserjet m1136 mfp user manual software. Manuals or user guides for your HP LaserJet Pro M1136 Multifunction Printer. 'LaserJet Pro P1102 paper jam', 'EliteBook 840 G3 bios update' Need help finding your product name or product number? HP LaserJet Pro M1136 Multifunction Printer. Choose a different product. Manuals or user guides for your HP LaserJet Pro M1136 Multifunction Printer series. HP LaserJet Pro M1136 Multifunction Printer series User Guides. Include keywords along with product name. Examples: 'LaserJet P1007 paper jam', 'HP 280 G2 Microtower bios update'. HP LaserJet Pro M1136 Multifunction Printer Tackle your everyday office tasks with an affordable, easy-to-use MFP. Print, copy and scan HP® India. PRODUCT MANUALS. Diagnostic Message for Accessories service. Diagnostic Message for label service. |
www.grandstream.com | Last Updated: 7/2011 |