Polycom SIP 2.2.0 manual Local User and Administrator Privilege Levels, Custom Certificates

Administrator’s Guide SoundPoint IP / SoundStation IP

Local User and Administrator Privilege Levels

Several local settings menus are protected with two privilege levels, user and administrator, each with its own password. The phone will prompt for either the user or administrator password before granting access to the various menu options. When the user password is requested, the administrator password will also work. The web server is protected by the administrator password (refer to Configuring SoundPoint IP / SoundStation IP Phones Locally on page 4-50).

Configuration changes can performed centrally at the boot server or locally:

Central	Configuration file:	Specify the minimum lengths for the user and administrator
(boot server)	sip.cfg	passwords.
		• For more information, refer to Password Lengths
		<pwd/><length/> on page A-74.
Local	Web Server	None.
	(if enabled)
	Local Phone User	The user and administrator passwords can be changed under the
	Interface	Settings menu or through configuration parameters (refer to Flash
		Parameter Configuration on page A-100). Passwords can consist of
		ASCII characters 32-127 (0x20-0x7F) only.
		Changes are saved to local flash but are not backed up to <Ethernet
		address>-phone.cfgon the boot server for security reasons.

Custom Certificates

	The phone trusts certificates issued by widely recognized certificate
	authorities when trying to establish a connection to a boot server for
	application provisioning. Refer to Trusted Certificate Authority List on page
	C-1.
	In addition, custom certificates can be added to the phone. This is done by
	using the SSL Security menu on the phone to provide the URL of the custom
	certificate then select an option to use this custom certificate.
Note
	For more information on using custom certificates, refer to “Technical Bulletin
	17877: Using Custom Certificates With SoundPoint IP Phones” at
	www.polycom.com/support/voice/ .
	Configuration changes can performed locally:

Local

Local Phone User Interface

The custom certificate can be specified and the type of certificate to trust can be set under the Settings menu.

4 - 48