Ultra Secure Mode

Default:

Ultra Secure Mode: NO - Destination Unreachable Message is never sent.

Default Security Mode: YES - Destination Unreachable Message is sent when needed.

Modifying the flag values

To modify the System Flags values, the flags must first be manually added to system.cfg. For more information about System Flags, see .

Password Encryption

In compliance with UC APL, FIPS 140-2 the SHA-256 (Secure Hash Algorithm) is applied to:

Application login passwords.

Linux operating system passwords.

CSRs (Certificate Signing Requests).

The output value for SHA-256 is 256 bits whereas for SHA-1 the output value is 160 bits.

For backward compatibility with previous versions, either SHA-1 or SHA-256 can be selected as the hash algorithm used in the creation of CSRs.

Upgrade / Downgrade Guidelines

The RMX configuration, including users and passwords, should be backed up before upgrading or downgrading.

The table below summarizes the system behavior with regard to passwords and certificates when upgrading to or downgrading from this version.

Polycom®, Inc.

872

Page 903
Image 903
Polycom 1500/1800/2000/4000 manual Password Encryption, Upgrade / Downgrade Guidelines, Modifying the flag values