Force HTTP/HTTPS provisioning server credentials

Last Updated : Apr 17, 2026 |
Prolog information
You can pre-enter HTTP or HTTPS provisioning server credentials if your server requires authentication before the phone is deployed for usage. Forced configuration of server credentials is a safety measure to protect files on the provisioning server from unauthorized access while still allowing the phone to access the server.
With the forced configuration of server credentials, end-users do not have to manually enter the username and password on their phones. Using a keyboard, administrators can create complex passwords for better security.
If the credentials are pre-configured, the user can work with the phone as if the server does not require authentication. If the credentials are not pre-configured or are changed, the user is prompted to enter their username and password to connect to the server.
You can configure HTTP/HTTPS provisioning server credentials through the web interface, DES, DHCP, and the 46xxsettings.txt file parameters.

Web interface configuration

You can enter the username and password during the phone configuration process through the web interface. You can enter the HTTP provisioning credentials in the Management tab of the web interface.

DES provisioning

If you use DES for phone provisioning, you can obtain server credentials from the response URL. For example:https://alice:myvoiceismypassword@provisioning.example.ca:8080/Avaya/

DHCP provisioning

If you use DHCP Option 242 to provision phones before the deployment, you can obtain provisioning credentials from the DHCP Option 242 server response.
Important:
If you configure provisioning server authentication through DHCP, the password string must not include the following symbols to avoid authentication and connection errors:
  • Double quote mark (“ ”)
  • Apostrophe (‘ ’)
  • Comma (,)
  • Equal (=)

46xxsettings.txt file configuration

The server credentials are stored in the 46xxsettings.txt file as FORCE_HTTP_AUTH_USERNAME and FORCE_HTTP_AUTH_PASSWORD parameter values. You can also configure these parameters through the 46xxsettings.txt file directly.