Polycom 2000 User Manual

Page of 682
Polycom RMX 2000 Administrator’s Guide
2-31
Media Encryption
Encryption is available at the conference and participant levels, based on 
AES 128 Media Encryption and DH 1024 Key Exchange standards. 
Media Encryption guidelines:
Encryption is not available in all countries and it is enabled in the 
MCU license. Contact Polycom Support to enable it.
Endpoints must support both AES 128 encryption and DH 1024 key 
exchange standards which are compliant with H.235 (H.323) to 
encrypt and to join an encrypted conference.
The encryption mode of the endpoints is not automatically 
recognized, therefore the encryption mode must be set for the 
conference or the participants (when defined).
Conference level encryption must be set in the Profile, and cannot be 
changed once the conference is running.
Mixing encrypted and non-encrypted endpoints in one conference is 
supported only for H.323 defined participants. Different states of 
encryption for predefined IP participants are possible, based on 
system flag settings: 
(ALLOW_NON_ENCRYPT_PARTY_IN_ENCRYPT_CONF).
In Cascaded conferences, to encrypt the conference the link between 
the cascaded conferences must be encrypted.
The ISDN/PSTN (H.320) protocol, as well as ISDN/PSTN endpoints 
do not support encryption. ISDN/PSTN participants can therefore 
only connect to encrypted conferences if the system is set up to allow 
the mixing of encrypted/non-encrypted participants in the same 
conference.
Conference Access
You can define whether access to conferences for encrypted and non-
encrypted IP participants is done at the conference level or at the 
participant level.