Installation guide

Configuration Methods
41-001561-00 REV00 – 10.2014 2-5
Non-Blocking HTTP Connections
The IP Phones support a non-blocking HTTP connection feature. This feature allows the user to continue using the phone
when there is a delay during an HTTP connection while the phone is waiting for the HTTP server to respond. This feature
also allows a user to abort the connection and perform other operations on the phone (which will abort the HTTP connec-
tion automatically). A user can also abort the HTTP loading by pressing the GOODBYE key while the phone is displaying
“Loading Page.......”.
Authentication Support for HTTP/HTTPS Download Methods for BroadSoft Client Management System (CMS)
The IP Phones have authentication support as referenced in RFC 2617 when using HTTP or HTTPS as download protocols.
If a 5i Series phone is challenged by an HTTP or HTTPS server when the server attempts to download the aastra.cfg file, the
phone automatically sends "aastra" as the default Username and Password back to the server. For more information about
this feature, see Chapter 5, the section, “Authentication Support for HTTP/HTTPS Download Methods, used with BroadSoft
Client Management System (CMS)” on page5-231.
Using HTTPS via the Mitel Web UI
HTTPS is enabled by default on the IP phones. When you open a browser window and enter an IP address or host name for
a phone using HTTP, a server redirection occurs which automatically converts an HTTP connection to an HTTPS connec-
tion. After the redirection, a “Security Alert” certificate window displays alerting the user that information exchanged with
the phone cannot be viewed or changed by others. Accepting the certificate then forwards you to the phone’s Web UI.
Reference
For more information on configuring the HTTPS protocol, see Chapter 4, the sections:
• “Configuring the Configuration Server Protocol” on page4-80
• “HTTPS Client/Server Configuration” on page4-30
Note:
This feature impacts only the HTTP calls triggered by a phone key (softkey or programmable key); the HTTP calls per-
formed by action URIs are still blocking.
Notes:
• The private key and certificate generate outside the phone and embed in the phone firmware for use by the HTTPS
server during the SSL handshake.
• Using the configuration files, the IP phone UI, or the Mitel Web UI, you can configure the following regarding HTTPS:
- Specify HTTPS security client method to use (TLS 1.0 or SSL 3.0)
- Enable or disable HTTP to HTTPS server redirect function
- HTTPS server blocking of XML HTTP POSTS to the phone