Machine Account - Polycom RealPresence 800s Administrator's Manual

RealPresence Collaboration Server 800s Administrator's Guide
2
3

Machine Account

User names can be associated with servers (machines) to ensure that all users are subject to
the same account and password policies.
For enhanced security reasons it is necessary for the Collaboration Server to process user
connection requests in the same manner, whether they be from regular users accessing the
Collaboration Server via the Collaboration Server Web Browser / RMX Manager or from
application-users representing applications such as CMA and DMA.
Regular users can connect from any workstation having a valid certificate while application-
users representing applications can only connect from specific servers. This policy ensures
that a regular user cannot impersonate an application-user to gain access to the Collaboration
Server in order to initiate an attack that would result in a Denial of Service (DoS) to the
impersonated application.
The connection process for an application-user connecting to the Collaboration Server is as
follows:
1
2
3
15-6
Right-click the user to be renamed and select Rename User.
The Rename User dialog box is displayed.
Enter the user's new name in the New User Name field and click OK.
The user is renamed and is forced to change his/her password.
The application-user sends a connection request, including its TLS certificate, to the
Collaboration Server.
The Collaboration Server searches its records to find the FQDN that is associated with the
application-user's name.
If the FQDN in the received certificate matches that associated with application-user, and
the password is correct, the connection proceeds.
Polycom, Inc.