Aastra Telecom 41-001343-02 manual Firmware Update Features, TLS Support

Administrator Level Options

Firmware Update Features

The IP phones support the protocols, TFTP, FTP, HTTP or HTTPS to download configuration files and upgrade firmware to the phones from a configuration server.

You can download the firmware stored on the configuration server in one of three ways:

•Using the “Firmware Update” page in the Aastra Web UI at the location Advanced Settings->Firmware Update.

•Using the IP Phone UI or the Aastra Web UI to restart the phone. The phone automatically looks for firmware updates and configuration files during the boot process.

•Setting an Auto-Resyncfeature to automatically update the firmware, configuration files, or both at a specific time in a 24-hour period). (Feature can be enabled using the configuration files or the Aastra Web UI).

Reference

For more information about firmware update, see Chapter 8, “Upgrading the Firmware.”

TLS Support

The IP Phones support a transport protocol called Transport Layer Security (TLS) and Persistent TLS. TLS is a protocol that ensures communication privacy between the SIP phones and the Internet. TLS ensures that no third party may eavesdrop or tamper with any message. An Administrator can configure the following parameters for TLS Support.

Parameter In	Parameter in	Parameters in Configura-	Description
IP Phone UI	Aastra Web UI	tion Files
N/A	Transport Protocol	sip transport protocol	Specifies the protocol that the IP phone uses to send out SIP messages.
			Default is UDP.
			Notes:
			• If you set the value of this parameter to 4 (TLS), the phone checks to see
			if the “sips persistent tls” is enabled. If it is enabled, the phone uses Per-
			sistent TLS on the connection. If “sips persistent tls” is disabled, then
			the phone uses TLS on the connection. If TLS is used, you must specify
			the Root and Intermediate Certificates, the Local Certificate, the Private
			Key, and the Trusted Certificates.
			• If the phone uses Persistent TLS, you MUST specify the Trusted Certifi-
			cates; the Root and Intermediate Certificates, the Local Certificate, and
			the Private Key are optional.

For more information, see Chapter 6, the section, “Transport Layer Secu- rity (TLS)” on page 6-16.

N/A N/A sips persistent tls Enables or disables the use of Persistent Transport Layer Security (TLS).

Persistent TLS sets up the connection to the server once and re-uses that connection for all calls from the phone. The setup connection for Persist- ent TLS is established during the registration of the phone. If the phones are set to use Persistent TLS, and a call is made from the phone, this call and all subsequent calls use the same authenticated connection. This sig- nificantly reduces the delay time when placing a call.

Notes:

• There can be only one persistent TLS connection created per phone.

• If you configure the phone to use Persistent TLS, you must also specify the Trusted Certificate file to use. The Root and Intermediate Certifi- cates, Local Certificate, and Private Key files are optional.

For more information, see Chapter 6, the section, “Transport Layer Secu- rity (TLS)” on page 6-16.

3-51 41-001343-02 REV04 – 05.2014