Cisco TelePresence Administrator's Manual page 414

Reference material
ID Title
40021 Remote logging
enabled
40022 Security alert
40024 CRL checking
required
40025 SNMP enabled
40026 Reboot required
40027 Security alert
40028 Insecure
password in use
40029 LDAP server CA
certificate is
missing
40030 Security alert
40031 Security alert
40032 Security alert
40033 Configuration
warning
Cisco VCS Administrator Guide (X8.1.1)
Description
You are recommended to disable
the remote syslog server when in
advanced account security mode
Active Directory secure channel
disabled; you are recommended to
enable the secure channel setting
Your login account LDAP server
configuration is recommended to
have certificate revocation list (CRL)
checking set to All when in
advanced account security mode
You are recommended to disable
SNMP when in advanced account
security mode
The advanced account security
mode has changed, however a
reboot is required for this to take
effect
The connection to the TMS
Provisioning Extension services is
not using TLS encryption
The root user's password is hashed
using MD5, which is not secure
enough
A valid CA certificate for the LDAP
database has not been uploaded;
this is required for connections via
TLS
Firewall rules activation failed; the
firewall configuration contains at
least one rejected rule
Unable to restore previous firewall
configuration
Unable to initialize firewall
The Default Zone access rules are
enabled, but leaving SIP over UDP
or SIP over TCP enabled offers a
way to circumvent this security
feature
Solution
Configure remote logging
Enable secure channel
Configure login account LDAP server
Configure SNMP mode
Reboot the VCS
Configure TMS Provisioning
Extension services connection
settings
View instructions on changing the
root password
Upload a valid CA certificate
Check your firewall rules
configuration, fix any rejected rules
and re-try the activation
Check your firewall rules
configuration, fix any rejected rules,
activate and accept the rules; if the
problem persists, contact your Cisco
representative
Restart the system; if the problem
persists, contact your Cisco
representative
Either disable UDP and TCP on the
SIP page to enforce certificate
identity checking using TLS, or
disable the access rules for the
Default Zone.
Alarms
Severity
Warning
Warning
Warning
Warning
Warning
Warning
Warning
Warning
Warning
Warning
Warning
Warning
Page 414 of 507