Polycom 1500/1800/2000/4000 Enabling Media Encryption for a Conference, Recording Link Encryption

Implementing Media Encryption for Secured Conferencing

Moving participants from entry queue to conference / between conferences depending on encryption settings

Destination			Current Participant Encryption Status
Conference		Encrypted		Non-Encrypted
Encryption Setting
	*Flag = NO		*Flag = YES	*Flag = NO	*Flag = YES
Encrypt All	Move succeeds, connected encrypted.			Move fails, disconnected.
Encrypt When Possible	Move succeeds,		Move succeeds,	Move succeeds,	Connected only if
	connected		connected	connected	endpoint was a
	encrypted		encrypted	non-encrypted	defined participant
					in the source
					conference.
					Otherwise, move
					fails.

* Flag = FORCE_ENCRYPTION_FOR_UNDEFINED_PARTICIPANT_IN_WHEN_AVAILABLE_MODE

Recording Link Encryption

Recording Links are treated as regular participants, however the system flag

ALLOW_NON_ENCRYPT_RECORDING_LINK_IN_ENCRYPT_CONF must be set to YES if a non-encrypted Recording Link is to be allowed to connect to an encrypted conference.

The following table summarizes the connection possibilities for a Recording Link that is to be connected to a conference for each of the conference profile and Entry Queue encryption options.

Connections by Recording Link and Conference Encryption Settings

Conference	Recording Link Connection Status according to flag:
	ALLOW_NON_ENCRYPT_RECORDING_ LINK_IN_ENCRYPT_CONF
Profile Setting
	YES	NO
Encrypt All	Connected encrypted if possible,	Connected only if encrypted, otherwise
	otherwise connected non-encrypted.	disconnected
No Encryption	Connected non-encrypted	Connected non-encrypted
Encrypt when possible	Connected encrypted if possible,	Connected encrypted if possible,
	otherwise connected non-encrypted.	otherwise connected non-encrypted.

Enabling Media Encryption for a Conference

Media encryption is enabled at three levels:

●MCU level - Setting the Encryption Flags

●Conference level - Enabling Encryption in the Profile

●Participant level - Enabling Encryption at the Participant Level

You must first set the system flags for the MCU before media encryption can be enabled for the conference and participants.

Polycom®, Inc. 159