In the /tftpboot directory of tftp01 there is now a file named Polycom-tls.cfg that contains the necessary config parameters to configure a phone to use TLS (rather than the default UDP, or TCP). This sets the following config parameters for registrations 1-8, which should be sufficient for the Poly models on the tftp server, plus the DCNV config.
First, you need to properly create a symlink of the tls config file in target customer directory:
cd /tftpboot/1234567890
ln -s ../Polycom-tls.cfg ./
Next, you make reference to it in a phone's <MAC>.cfg file's CONFIG_FILES configuration as shown below. This file SHOULD be the first entry, as the Polycom phones read those configs from the more specific to least specific, with the more specific configurations overriding the less specific configs.
The next time the phone is rebooted it should pull the list of CONFIG_FILES. You can verify this in the /var/log/xferlog and then pull a pcap from OCOM and make sure is shows as TLS.

