Cisco Cisco TelePresence MCU 4510 Maintenance Manual
Configuring security settings
To configure security settings for the MCU, go to
Settings > Security
.
n
n
n
n
Hashing passwords
By default the MCU hashes user passwords before storing them in the configuration.xml file. Passwords
are stored as hash sums and are not stored anywhere on the MCU in plain text.
are stored as hash sums and are not stored anywhere on the MCU in plain text.
Security settings
If you make any changes, click Update security settings when you finish.
Field
Field description
Advanced
account
security
mode
account
security
mode
Important! If you decide to enable advanced account security mode, you should first implement
the recommendations below in
the recommendations below in
.
Advanced account security has the following features:
n
All current passwords (created when the MCU was not in advanced account security mode)
will be expired and must be changed by the users when they next log in.
will be expired and must be changed by the users when they next log in.
n
The MCU will demand that passwords fulfil certain criteria (using a mixture of alphanumeric
and non-alphanumeric characters) and will apply certain rules on expiring and changing
passwords.
and non-alphanumeric characters) and will apply certain rules on expiring and changing
passwords.
n
The MCU will disable a user account after three consecutive incorrect password entry
attempts. Administrator accounts are disabled for 30 minutes; other accounts are disabled
indefinitely or until re-enabled by an administrator.
attempts. Administrator accounts are disabled for 30 minutes; other accounts are disabled
indefinitely or until re-enabled by an administrator.
n
The MCU will disable any non-administrator account that is inactive for 30 days.
Administrators can re-enable the account from the
Administrators can re-enable the account from the
User
page.
n
From the
User
page, administrators can also change the password for any user account, or
enforce a password change by the user, or lock the password to prohibit password changes
except by an administrator.
except by an administrator.
Redirect
HTTP
requests to
HTTPS
HTTP
requests to
HTTPS
Enable this option to have HTTP requests to the MCU automatically redirected to HTTPS. The
option is unavailable if either HTTP or HTTPS access is disabled on the
option is unavailable if either HTTP or HTTPS access is disabled on the
Network > Services
page.
Idle web
session
timeout
session
timeout
The timeout setting for idle web sessions, which can be set to a value between 1 minute and 60
minutes. If a web session expires, the user must log in again.
minutes. If a web session expires, the user must log in again.
Status web pages that auto-refresh will keep a web session active indefinitely. You can
configure the MCU not to auto-refresh those pages, from the
configure the MCU not to auto-refresh those pages, from the
Settings > User interface
page.
Serial console settings
If you make any changes, click Update console settings when you finish.
Cisco TelePresence MCU Series 4.5 Online Printable Help
Page 216 of 278
Configuring the MCU
Configuring security settings