A one-time global password lets a phone download its configuration using shared global credentials a single time, after which the phone is automatically assigned its own unique credentials. This article explains why one-time global passwords are used, when to use one, and how to apply it to one or more phones from the Inventory page.
Why One-Time Global Passwords Are Used
A phone's configuration includes the account information it uses to connect to the Level365 platform. To protect that information, each phone downloads its configuration using credentials unique to that phone rather than a password shared by every phone.
A one-time global password lets a phone get its unique credentials securely. The shared password works only once, and only for a phone where it has been specifically allowed. This prevents anyone who obtains the shared password from using it to download phone configurations, helping protect phones and accounts from being compromised by unauthorized parties.
When to Use a One-Time Global Password
A phone that doesn't have its unique credentials can't download its configuration until a one-time global password is allowed for it.
Phones That Need a One-Time Global Password
- A phone has been factory reset.
- A phone can no longer download its configuration because its stored credentials don't match.
A one-time global password must be set before a phone is factory reset. Complete the steps below first, then factory reset the phone. A phone that is factory reset without a one-time global password can't download its configuration.
Phones That Don't Need a One-Time Global Password
- New phones that have been pre-provisioned for a user but haven't been connected yet. These phones have a one-time global password enabled by default.
- Phones that are already working.
How It Works
When a one-time global password is allowed for a phone, the phone uses it the next time it provisions or re-syncs. After that single use, the phone is assigned new unique credentials and the one-time global password is turned off for that phone automatically.
A phone with a one-time global password waiting to be used shows a green key icon on the right side of its row on the Phone Hardware tab.
A one-time global password works for a single provisioning request only. If the phone needs it again later, allow it again using the steps below.
Use a One-Time Global Password for One Phone
- In Manage Organization, select Inventory, then select the Phone Hardware tab.
In the phone's row, click the key icon on the right side. The tooltip reads Allow Global Credentials (one time).
Click Enable.
- The green key icon appears in the phone's row until the phone uses the one-time global password.
- Factory reset the phone. For most Yealink IP phones, follow the steps below. Other devices such as Grandstream or HP Poly (Polycom) have different factory reset procedures. Follow the manufacturer's factory reset instructions for the specific model.
- On the Yealink phone, press and hold the OK button until the phone prompts to factory reset.
- Select OK to begin the reset.
- Wait for the phone to restart.
- After the factory reset, the phone restarts and uses the one-time global password to download its configuration.
- Once the phone has downloaded its configuration, the green key icon no longer appears in the phone's row on the Phone Hardware tab.
Use a One-Time Global Password for Multiple Phones
- In Manage Organization, select Inventory, then select the Phone Hardware tab.
- Select the checkbox to the left of each phone, then click Bulk Edit.
- In the Bulk Edit Phones window, select the checkbox next to Provisioning Credentials, then select Global (one time) from the dropdown.
- Click Save. To have the phones re-sync right away, click the arrow next to Save and select Save and Re-sync.