Summary of the content on the page No. 1
Grandstream Networks, Inc.
XML Provisioning Guide
GXV3140/GXV3175 IP Multimedia Phone
GXV21XX/GXP14XX Enterprise IP Phone
HT50x Analog Telephone Adapters
GXW40xx FXS Analog IP Gateways
Summary of the content on the page No. 2
www.grandstream.com TABLE OF CONTENTS XML PROVISIONING GUIDE OVERVIEW ......................................................................................................................................................... 3 PROVISIONING FLOW ......................................................................................................................................... 3 XML SCHEMA AND EXAMPLE FILE ..............................................................
Summary of the content on the page No. 3
OVERVIEW The XML provisioning system allows Grandstream phones to perform configuration updates via XML configuration files. In addition, the XML provisioning implementation may also allow generic XML configuration file on top of the MAC based configuration file. Note: Currently, XML provisioning is supported on the following Grandstream products: • GXV3140 IP Multimedia Phone • GXV3175 IP Multimedia Phone • GXP21XX/GXP14XX Enterprise IP phones • HT50X Analog Telephone Adapter
Summary of the content on the page No. 4
000b82123456 0 Account name The mac element is not mandatory. It is designed this way because not all provision systems support MAC address. If it is present, the provision program will validate the mac element with the actual MAC address on the device. XML FILE ENCRYPTION The XML configuration file may be encrypted using AES-256-CBC algorithm. The enc
Summary of the content on the page No. 5
SECURE PROVISIONING Although the XML config file can be encrypted and the encryption algorithm itself is regarded as safe and strong by using AES with 256-bit key length, it remains a question on how to bootstrap and provision the initial XML encryption password. There are several methods to provide solutions to this: 1. Use legacy binary config file to set the initial XML encryption password. The legacy binary file is encrypted and it generally regarded safe. 2. Use HTTPS and use cli
