Deployment Guide for the Polycom CX700 IP Phone
17. | Polycom CX700 phone attempts HTTP request | (Kerberos Auth fails) |
| to download RootCA cert chain using Kerberos |
|
| (SPNEGO) |
|
|
|
|
18. | Polycom CX700 phone attempts HTTP request | (Kerberos Auth succeeds) |
| to download RootCA cert chain using Kerberos |
|
| (SPNEGO) w/different key |
|
|
|
|
19. | DC streams Base64 certificate chain to Polycom | (URL: /certsrv/certnew.p7b, Using SPNEGO |
| CX700 phone via HTTP | Authentication) |
|
|
|
20. | Polycom CX700 phone initiates a TLS | (Client Hello) Note: SHA2 is not supported |
| connection to the pool’s IP address with the |
|
| Ciphers it supports |
|
|
|
|
21. | Pool responds with negotiated Cipher spec to | (Server Hello) Note: TLS connection is now |
| complete the TLS handshake | established. |
|
|
|
22. | Polycom CX700 phone queries DNS for | (fabrikam.com) Returns IP address of Exchange CAS |
| autodiscover.<SIPDomain> A record | if configured. |
|
|
|
23. | Polycom CX700 phone initiates TLS connection | (Used for missed call notification) |
| with Exchange 2007 CAS |
|
|
|
|
24. | Polycom CX700 phone sends HTTP 80 POST to | (Payload contains phone vendor info) |
| pool.<DHCPDomain> for |
|
| /RequestHandler/ucdevice.upx |
|
• | Note: This would be an HTTPS 443 POST to |
|
| pool.<DHCPDomain> for |
|
| /RequestHandlerExt/ucdevice.upx for an external |
|
| OCPE device |
|
|
|
|
25. | Pool responds with current firmware upgrade | (These values are blank if WMI settings were not |
| version and Internal / External file path info | populated) |
|
|
|
• | <BaseURL> - |
|
| http://pool01.contoso.com/DeviceUpdateFiles_Int/UCPhone/Polycom/CX700/A/ENU/1.0.522.101/CPE | |
• | <ExternalBaseURL> - |
|
| https://ocsrp.fabrikam.com/DeviceUpdateFiles_Ext/UCPhone/Polycom/CX700/A/ENU/1.0.522.101/CPE | |
|
| |
26. | Polycom CX700 phone issues an HTTP GET for CPE file if it’s newer than the currently installed version | |
• | (HTTP:Request, GET |
|
| /DeviceUpdateFiles_Int/UCPhone/Polycom/CX700/A/ENU/1.0.522.101/CPE/CPE.nbt) | |
|
|
|
27. | Pool begins streaming CPE.nbt to Polycom | (You will see a lot of TCP traffic) |
| CX700 phone as a |
|
| 15MB) |
|
|
|
|
28. | Polycom CX700 phone issues one last HTTP Get | (Success!!) |
| and the pool responds with 200 to indicate |
|
| download is complete |
|
|
|
|
20
