Cisco Systems C90 manual Certificates for secure logging, About audit logging

Page 22

Cisco TelePresence System Codec C90 and Profile 65” Dual using C90

Contents

Introduction

Web interface

Advanced configuration

Password protection

Appendices

Administrator guide

Contact us

Certificates for secure logging

If you want to use the ExternalSecure audit logging mode, you must upload a list of trusted audit certificates to the codec. This list covers all audit servers that your codec shall trust.

In the ExternalSecure audit logging mode audit logging information will only be sent to entities holding a valid audit certificate.

Note: You should always upload the audit certificate list before enabling secure audit logging.

About audit logging

Audit logging records all login activity and configuration changes on the codec.

Audit logging is disabled by default, and must be enabled using the on screen menu, the web interface or the command line interface.

There are three audit logging modes: Internal, External and ExternalSecure.

The Audit Certificate page

Upload the Audit certificate list

To install the audit certificate, you will need:

Audit list file ( .PEM format)

Contact your system administrator to obtain the required file.

Press Browse... and locate the file with the audit list file (.PEM format).

Press Upload to upload the certificate to the codec.

Enable secure audit logging

To enable secure audit logging using the web interface or on screen menu, go to Advanced Configuration and perform the following steps:

1.Navigate to Security > Audit > Server and enter the IP address of the audit server.

2.Navigate to Security > Audit > Logging > Mode and set it to ExternalSecure.

To enable secure audit logging using the command line interface, log in to the codec using SSH or Telnet and enter the following commands:

1.Security Audit Server Address <ip address>

2.Security Audit Logging Mode ExternalSecure

D14635.05 Profile C90 and Codec C90 Administrator Guide TC4.1, February 2011.

22

www.cisco.com

Copyright © 2010-2011 Cisco Systems, Inc. All rights reserved.

Image 22
Contents Administrator guide How to use this guide Table of ContentsAdministrator guide Introduction ChapterIntroduction User documentationSoftware release notes New features and improvementsWhat’s new­in this version Software download User documentationAdvanced configuration menu Profile 65 Dual at a glance Touch controllerPerformance features Design featuresApplication features Codec C90 at a glanceWeb interface Connect to the codec Password protectionWeb interface SigningMenu options Interactive menusSystem information System InformationMaking calls from the web interface CallMaking a snapshot SnapshotUser management Default user accountSecurity mode User rolesAbout password and PIN-code Press Create new userChanging your password Change PasswordUpload and activate the wallpaper Custom wallpaperFile format and picture size WallpaperAdding a logon banner Logon BannerUpload Certificates Upload the SSL certificate Uploading certificatesUpload the Trusted CA certificates list About audit logging Enable secure audit loggingCertificates for secure logging Audit Certificate Upload the Audit certificate listLogs Historical log files Support log filesCurrent log files Viewing XML files XML FilesUpgrade Software Option key Software upgradeSoftware release notes and upgrade files Software versionsAdvanced configuration Advanced ConfigurationRestarting the system RestartAdvanced configuration settings Advanced configuration overview Network 1..1 RemoteAccess Allow Administrator guide Administrator guide Audio settings Audio Input Line 1..4 Channel Audio Input Microphone 1..8 EchoControl ModeAudio Input Line 1..4 Mode Audio Input Line 1..4 LevelAudio Input Microphone 1..8 Type Audio Output Hdmi 1, 3 ModeAudio Input Microphone 1..8 Level Audio Output Hdmi 1, 3 LevelAudio SoundsAndAlerts KeyTones Mode Audio Output Line 1..6 ModeAudio Output Line 1..6 Equalizer Mode Audio Output Line 1..6 ChannelCameras settings Cameras Camera 1..7 Flip Cameras Camera 1..7 Focus ModeCameras Camera 1..7 Whitebalance Mode Cameras Camera 1..7 IrSensorConference settings Conference 1..1 Encryption Mode Conference 1..1 DoNotDisturb ModeConference 1..1 FarEndControl Mode Conference 1..1 DefaultCall ProtocolConference 1..1 VideoBandwidth MainChannel Weight Conference 1..1 VideoBandwidth ModeConference 1..1 PacketLossResilience Mode Conference 1..1 VideoBandwidth PresentationChannel WeightGpio settings H323 settingsH323 Profile 1..1 CallSetup Mode H323 Profile 1..1 Authentication LoginNameH323 Profile 1..1 Authentication Password H323 Profile 1..1 Gatekeeper DiscoveryNetwork settings Network 1..1 IPv6 Assignment Network 1..1 QoS ModeNetwork 1..1 IPv4 Address Network 1..1 IPv4 GatewayNetwork 1..1 IEEE8021X Password Network 1..1 QoS Diffserv SignallingNetwork 1..1 IEEE8021X Mode Network 1..1 QoS Diffserv DataNetwork 1..1 IEEE8021X AnonymousIdentity Network 1..1 TrafficControl ModeNetwork 1..1 RemoteAccess Allow Network 1..1 IEEE8021X Eap Md5NetworkPort 2 Mode NetworkPort settingsNetwork 1..1 Vlan Voice Mode Network 1..1 Vlan Voice VlanIdNetworkServices settings NetworkServices SIP Mode NetworkServices NTP ModeNetworkServices NTP Address NetworkServices Snmp ModeNetworkServices Snmp SystemLocation NetworkServices Snmp SystemContactNetworkServices Telnet Mode NetworkServices SSH ModePhonebook settings Provisioning settingsSecurity settings SerialPort Mode SerialPort settingsSecurity Audit Logging Mode SerialPort BaudRate Security Session InactivityTimeoutSIP settings Standby settings SystemUnit settings SystemUnit IrSensor Mode Time settingsSystemUnit CallLogging Mode Time DateFormatTime Zone Video settingsVideo DefaultPresentationSource Video Input DVI 3, 5 TypeVideo Input Source 2 Connector Video Input Source 1 ConnectorVideo Input Source 5 Connector Video Input Source 3 ConnectorVideo Input Source 1..5 Quality Video Input Source 1..5 OptimalDefinition ProfileVideo Input Source 1..5 OptimalDefinition Threshold60fps Video Layout ScalingVideo Layout ScaleToFrameThreshold Video Layout ScaleToFrameVideo Layout LocalLayoutFamily Video SelfviewPositionVideo OSD Output Video OSD ModeVideo Monitors Video OSD TodaysBookingsVideo Output Hdmi 1, 3 OverscanLevel Video OSD LoginRequiredVideo Output Hdmi 1, 3 Resolution Video AllowWebSnapshotsVideo Output DVI 2, 4 OverscanLevel Video Output DVI 2, 4 ResolutionVideo Output Composite 5 Resolution Video Output Composite 5 OverscanLevelExperimental BrightnessGradient Camera 1..7 Mode Experimental settingsExperimental AudioTracking Camera 1..7 Mode Video WallPaperExperimental SystemUnit Controller Address Experimental SoftwareUpgrade ModeExperimental SoftwareUpgrade ServerAddress Experimental CapsetFilterExperimental Audio Input Microphone 1..8 Channel Experimental NetworkServices UPnP ModeExperimental NetworkServices UPnP Timeout Experimental Audio MicrophoneReinforcement GainExperimental SystemUnit MenuType Experimental Audio Panning ModeExperimental Audio Panning MonitorRight Experimental Audio Panning MaxAnglePassword protection Set the Administrator settings menu password Password protectionChange your codec password Change the user passwords Set a root passwordAppendices Administrator guide # * # 0 2 # About monitors when you have a Codec C90Main monitor Dual monitorsTC console Video compositor Audio consoleOptimal definition profiles Optimal definition profiles for systems supporting 720p60ClearPath Packet loss resilience Administrator guide Video input matrix Configure the video inputsDefault configurations About the matrixDnam Loudspeaker Dnam for ProfileDnam Amplifier Technical specifications Profile 65 DualSystem Management Approvals Codec C90 Network Interfaces Directory Services Approvals Contact us