
H323 Telephone Installation
Page 87
Issue 23e (Friday, February 15, 2019)
IP Office™ Platform 11.0
Comments on this document? [email protected]
TLS Support:
7. TLS Support
For IP Office Release 10 and higher, it is possible to use TLS for the connection of 9600 telephones. When enabled, TLS is
used for the TCP RAS and call signalling between the telephone and the IP Office system.
·
Supported with the 9608, 9611, 9621 and 9641 models.
·
Requires the phone to be running 6.6029 firmware or higher.
·
Requires the telephone to use a non-default CRAFT password.
·
The use of TLS by the system can be set as either optional or enforced.
Process Summary
1. Customize the Craft process password
2. Add the identity certificate
3. Enable TLS on the IP Office system
4. Enable TLS on the telephone
Additional Notes
For phones using TLS:
·
HTTPS file server connection uses port 8411. File server need same certificate.
·
If remote and also using SRTP, the telephone uses port 8443 for backup/restore.
7.1 Changing the CRAFT Password
TLS operation cannot be enabled if the telephones are using the default CRAFT process password. The password can be
changed as follows:
If the telephones are downloading a 46xxsettings.txt file from a file server:
1. Add a
SET PROCPSWD
entry to the 46xxsettings.txt file followed by the password that should be used.
2. Cause the telephones to reboot in order to reload the settings files and use the new setting.
If the telephones are using the IP Office auto-generated settings:
1. Receive the IP Office configuration and locate the
NoUser
user.
2. In the
Source Numbers
tab, add
SET_46xx_PROCPSWD=
followed by
the new password. Note that the
command is case sensitive.
3. Save the configuration and reboot the system.
To view the auto-generated file setting:
1. Using a browser, enter
http://<server_address>/46xxsettings.txt.
2. The file should include a line starting
SET PROCPSWD
followed by the new password.