Password Encryption - TANDBERG D14049.04 Administrator's Manual

Grey Headline (continued)

Password encryption

All passwords configured on the VCS are stored in encrypted form. This applies to the following,
which all have usernames and passwords associated with them:
•
the default admin administrator account
•
any additional administrator accounts
•
local authentication database credentials (a list of valid usernames and passwords that are
used when other devices are required to authenticate with the VCS)
•
outbound connection credentials (used by the VCS when required to authenticate with another
system)
•
LDAP server (used by the VCS when binding to an LDAP server)
Passwords can be configured using either the CLI or the web interface.
Web interface
When entering or viewing passwords using the web interface, you will see placeholder characters
(e.g. dots or stars, depending on your browser) instead of the characters you are typing.
Command line interface (CLI)
When entering passwords using the command line interface (CLI), you will type the password in
plain text. However, after the command has been executed, the password will be displayed in its
encrypted form with a {cipher} prefix, e.g.
xConfiguration LDAP Password: "{cipher}xcy6k+4NgB025vYEgoEXXw=="
FindMe is a standalone application that can be hosted by the VCS or by another remote
server. This means that FindMe user account information is not configured or accessible
using the CLI of the VCS. However, FindMe user passwords are still stored securely.
Overview and System
Introduction
status configuration
D14049.07
March 2010
Overview
VCS Zones and
configuration neighbors
When a password is encrypted, it uses more characters than the original plain text version of the
password. For each type of password, the maximum number of plain text characters that can be
entered and the maximum number of encrypted characters that are displayed through the CLI are
shown in the table below.
Password type
Admin account
Administrator accounts
Local Database authentication credentials
Outbound connection credentials
LDAP server
FindMe accounts
Clustering and Call Bandwidth
peers processing control
178
TANDBERG VIDEO COMMUNICATION SERVER
Maximum length of passwords
Maximum plain text
characters
16
16
128
128
60
30
Firewall
Applications Maintenance
traversal
ADMINISTRATOR GUIDE
Maximum displayed
encrypted characters
65
65
215
215
122
82
Appendices