Password Encryption; Upgrade / Downgrade Guidelines - Polycom 1500 Administrator's Manual

RealPresence Collaboration Server (RMX) 1500/1800/2000/4000 Administrator's Guide
● Default:
 Ultra Secure Mode: NO - Destination Unreachable Message is never sent.
 Default Security Mode: YES - Destination Unreachable Message is sent when needed.
Modifying the flag values
To modify the System Flags values, the flags must first be manually added to system.cfg.
For more information about System Flags, see
Administrator's Guide.

Password Encryption

In compliance with UC APL, FIPS 140-2 the SHA-256 (Secure Hash Algorithm) is applied to:
● Application login passwords.
● Linux operating system passwords.
● CSRs (Certificate Signing Requests).
The output value for SHA-256 is 256 bits whereas for SHA-1 the output value is 160 bits.
For backward compatibility with previous versions, either SHA-1 or SHA-256 can be selected as the hash
algorithm used in the creation of CSRs.

Upgrade / Downgrade Guidelines

The RMX configuration, including users and passwords, should be backed up before upgrading or
downgrading.
Table 5-53 summarizes the system behavior with regard to passwords and certificates when upgrading to
or downgrading from this version.
Polycom®, Inc.
Manually Adding and Deleting System Flags in the
851