DMA OperationsGuide The Consequences of Enabling Maximum Security Mode
56 Polycom, Inc.
•Other configuration settings have st ric te r l im its an d constraints (each is set
to the noted default if below that level when you enable Maximum
security):
—Session configuration limits:
»Sessions per system is 4-80 (default is 40).
»Sessions per user is 1-10 (default is 5).
»Session timeout is 5-60 minutes (default is 10).
—Local account configuration limits:
»Local user account is locked after 2-10 failed logins (default is 3)
due to invalid password within 1-24 hours (default is 1).
»Locked account remains locked either until unlocked by an
administrator (the default) or for a duration of 1-480 minutes.
•Software build information is not displayed anywhere in the interface.
•You can’t restore a backup made before Maximum security was enabled.
•File uploads may fail when using the Mozilla Firefox browser unless the
proper steps have been taken. See below.
Enabling File Uploads in Maximum Security with Mozilla Firefox The Mozilla Firefox browser uses its own certificate database instead of the
certificate database of the OS. If you use only that browser to access the
Polycom DMA system, the certificate(s) needed to securely connect to the
system may be only in the Firefox certificate database and not in the Windows
certificate store. This causes a problem for file uploads.
File upload via the Polycom DMA system’s Flash-based interface bypasses the
browser and creates the TLS/SSL connection itself. Because of that, it uses the
Windows certificate store, not the Firefox certificate database. If the
certificate(s) establishing trust aren’t there, the file upload silently fails.
To avoid this problem, you must import the needed certificates into Internet
Explorer (and thus into the Windows certificate store). And, when accessing
the system with Firefox, you must use its fully qualified host name.
First, start Internet Explorer and point it to the Polycom DMA system. If you
don’t receive a security warning, the needed certificates are already in the
Windows certificate store.
If you receive a warning, import the needed certificates. The details for doing
so depend on the version of Internet Explorer and on your enterprise’s
implementation of certificates.
In Internet Explorer 7, elect to continue to the site. Then click Certificate Error
to the right of the address bar and click View Certificates to open the
Certificate dialog box. From there, you can access the Certificate Import
Wizard.