Login Timeout; Two-Level User Management - Grandstream Networks UCM6100 Manual Manual

to change the default password after login for the first time.
To change the password for the default user "admin", go to web GUI->Settings->Change Password page.
The new password has to be at least 4 characters. The maximum length of the password is 30 characters.
The minimum requirement for the login password is as below if "Enable Strong Password" (on web GUI->
PBX->Internal Options->General) is turned on:

Must contain numeric digit;

Must contain at least one lowercase alphabet, uppercase alphabet or special character.
Strong password with a combination of numbers, lowercase alphabet characters, uppercase characters
and special characters is always recommended to protect your login.

LOGIN TIMEOUT

An authenticated user of the UCM6100 web UI may log in the system and then leave the active session on
a terminal unattended without intentionally logging-off from the system. An adversary with access to the
terminal could then have access to the UCM6100, meaning all the configuration and status information
could be exposed and changed intentionally or unintentionally.
UCM6100 provides protection from such vulnerability using login timeout. After the user logs in the
UCM6100 web UI, the user will be automatically logged out after certain timeout. This timeout value can be
specified under UCM100 web GUI->Settings->Login Timeout Settings page. In the case that the user
doesn't make any operation on web GUI within the timeout period, the user will be logged out automatically
and the web UI will be redirected to the login page, requiring password to access the web pages.
If the login timeout period is set to a short enough time, the chances of an adversary gaining access to an
unattended terminal are significantly reduced. However, the timeout period cannot be too short that an
authenticated user becomes annoyed by frequent automatic logouts during normal use. Therefore, users
shall set it to a value according to actual usage and situation. The default value of login timeout is 10
minutes.

TWO-LEVEL USER MANAGEMENT

On UCM6100, two privilege levels for web UI users are supported:

Super Admin: high priority

Admin: low priority
Super administrator can access all pages on UCM6100 web UI, change configuration for all options and
UCM6100 Security Manual Page 5 of 23