Phones

The end devices are provisioned via the UCServer administration. As soon as the setup has been successfully completed, the end devices are displayed in Web Admin.

Firmware and security settings can be made in the Web Admin.

Firmware

In this area, the centralised distribution of the firmware for the telephones can be configured by the Voice Services. The firmware files are provided centrally by STARFACE and are not all stored in the telephone system from the outset.

Centralised firmware distribution is available for the following telephones/end devices :

Only firmware files are downloaded for the telephone types for which at least one telephone account is configured to the ProCall Voice Service.

It is not necessary to have an active phone account for the corresponding firmware file to be downloaded.

Update firmware - Configuration

Check for updates - next execution

An automatic check is carried out once a week to determine whether the locally stored firmware files on the telephone system need to be updated.

The time of this check is determined once at random and cannot be changed. The time zone in which the respective telephone system is located is also displayed.

A manual check to see whether new firmware versions are available can be started using the "Check now" button.

Über neue Firmwares informieren

If this option is activated, the administrator is informed of new firmware by e-mail.

Activate automatic downloads and updates

If the check recognises that new firmware files are available, these are downloaded a few hours after the automated check. The firmware files are always downloaded at a random time between 20:00 and 23:00 on the same day as the automatic check of the firmware versions.

The download of the new firmware files can also be started manually using the "Download now" button.
The phones can either be updated automatically by STARFACE at a freely configurable time of the week or manually using the "Update now" button.

If a large number of telephones of one telephone type need to be updated, the updates are carried out in blocks of 50 telephones at a time.

The three points described above (checking, downloading and updating the firmware) are also carried out automatically in the following three scenarios:

• When updating the telephone system to a new version

• When creating a telephone account with a previously unconfigured telephone type

  

  In the third scenario, the automatic process (checking, downloading and updating the firmware) is only carried out for the respective new phone type.

Log files for automatic firmware distribution

The log files for automatic firmware distribution are:

• firmwares
• firmware-journal
• autoprov.log

Firmware overview

Under the heading "Firmware overview", the following key data is listed for all telephone types for which at least one telephone account has been configured in the Voice Services:

• Manufacturer of the phone
• Name of the model
• Currently installed firmware version
• Firmware version currently stored locally
• Firmware version provided by STARFACE

The "Auto update" checkbox can be used to configure whether or not the firmware file should be updated on the phones for the respective phone type.
If this checkbox is not activated, the firmware will not be updated even if the firmware update is started manually using the "Update now" button.

Security

General telephone security

By selecting the "Transfer passwords" button, the passwords for all telephone accounts are changed and distributed to the end devices. If there are a large number of telephones, the distribution process is automatically staggered. This option can be used, for example, if it can be assumed that one or more SIP accounts have been compromised.

Manufacturer-specific settings

The passwords for the administration mode and, if available, the user mode of the various telephone models supported by the voice services can be maintained centrally here.
After the basic installation, the stored passwords correspond to the standard passwords of the respective manufacturers and should be changed for security reasons.
If the passwords for accessing the web interface of the telephones are changed, the configured end devices of the respective manufacturer can be informed of the change once when saving. The end devices are notified and retrieve the new configuration from the telephone system as soon as there is no active call.

Please refer to the respective manufacturer's documentation on how to use the administration and user mode on the phones.

Encryption

Access to the STARFACE user's telephone menus is protected by a security mechanism ex works. However, this means that the phone menu cannot be used on some phone models as they do not support access protection.
Encryption can also be activated in the manufacturer-specific settings for the following manufacturers:

• Gigaset
• Snom
• Yealink

Encryption is deactivated in the default settings and must be activated manually .

Make sure that the STARFACE has a valid certificate, otherwise some encrypted service features may not work correctly.

Encryption includes the following points:

• Autoprovisioning of the end devices (HTTPS)
• Telephone menus of the end devices (HTTPS)
• Telephony between the end devices and STARFACE (TLS + SRTP)

Overview of encrypted end devices

The following list shows all phone models that support encryption:

Digest-Authentifizierung

Thanks to the special option that can be selected for Snom end devices, the access data is not transmitted to the telephone in plain text but in encrypted form.