Configuring Security Mode - Polycom VSX 3000 Administrator's Manual

Administrator's Guide for the VSX Series

Configuring Security Mode

8 - 6
You can configure VSX 3000A, VSX 5000, VSX 6000A, VSX 7000s, VSX 7000e,
and VSX 8000 systems to use Security Mode, which provides secure access to
the system. Security Mode is based on Transport Layer Security (TLS) 1.0
using 168-bit Triple-DES. These protocols encrypt management
communication over IP, preventing access by unauthorized users.
Every time you enable Security Mode, you must configure a new password for
the system. The password cannot be blank and it cannot be the default value
(serial number).
Security Mode requires secure access and a password for Web, Telnet, and FTP
access:
• To access a VSX system in Security Mode using the system's web interface,
enter the IP address of the system using secure HTTPS access, for example,
https://10.11.12.13. Click Yes in the security dialogs that appear. This
access uses port 443. To access Admin Settings using VSX Web when a
remote access password is set, enter "admin" for the user name.
• To access a VSX system in Security Mode using Telnet, you must use a
Telnet client that supports TLS. This access uses port 992 or 993.
• To access a VSX system in Security Mode using FTP, use FTPS, or
FTPS-TLS, to implement a secure session. This access uses port 990.
To configure the system to use Security Mode:
1. Go to System > Admin Settings > General Settings > Security.
2. Enable Security Mode.
When you change this setting, the VSX system restarts. Every time a VSX
system is powered on or restarts in Security Mode, it verifies that the system
software is authentic Polycom software.
Points to note about Security Mode:
• SNMP access is not available in Security Mode.
• Global Management System and ReadiManager® SE200 are not compatible
with VSX systems in Security Mode.
• Software images for version 8.5 and later are digitally signed by Polycom. To
install an earlier version of system software, you must disable Security Mode.
• If Security Mode is not enabled, the system first attempts to use a secure
protocol (such as HTTPS), but reverts to the non-secure form of the protocol if
the management system does not have a secure client.
• If Security Mode is enabled, you must enter the room password to reset the
system (System > Diagnostics > Reset System).