cancel
Showing results for 
Search instead for 
Did you mean: 

Configuring Device Lock for Skype for Business on VVX 201

Highlighted
Advisor

Configuring Device Lock for Skype for Business on VVX 201

Hi,

 

When my VVX 201 phone is paired with system, and when Iam locking the system the phone also gets locked and shows Away status.

 

But, when with out pairing i have logged in the phone as well as in the system, then locking the system does not change the status of my VVX phone.

 

In this scenario, I understand the device state is considered, however to reduced the auto lock time in UC 5.5.1 is not mentioned in the admin guide.

 

I could only find up.btoeDeviceLock.timeOut option which is used in paired mode.

Is there any other parameters to reduce the time limit when the phone is logged in S4B.

 

Thanks in advance.

Message 1 of 6
5 REPLIES
Polycom Employee & Community Manager

Re: Configuring Device Lock for Skype for Business on VVX 201

Adarsh P S

does a CX phone lock when you lock your PC and it is not connected via USB?

 

I am not aware how that should work. 

 

All I am aware of is the "normal" Phone lock:

 

Jun 02, 2016 Question:How can I disable the LYNC / Skype lock Policies for Polycom phones?

Resolution: Please check => here <= 


Please ensure to provide some feedback if this reply has helped you so other users can profit from your experience.

Best Regards

Steffen Baier

Polycom Global Services

Please be aware:

The purpose of these forums is to allow community members collaborate and help each other.
Questions posted here do not follow Polycom’s SLA guidelines.
If you require assistance from Polycom technical support, please open a
web service request or call us .

The above is necessary in order to track issue internally within Polycom.

You are welcome to post more questions or configuration or logs for other community members to look at but if your issue requires a fix via Polycom you must go via the official support structure.

Please ensure you always check the VoIP , Video Endpoint , Skype for Business , PSTN or RPM FAQ's

Please remember, if you see a post that helped you , and it answers your question, please mark it as an "Accept as Solution".

This forum reply or post is based upon my personal experience and does not reflect the opinion or view of my employer.
Polycom employee participation within this community is not mandatory and any post or FAQ article provided by myself is done either during my working hours or outside working hours, in my private time, and may be answered on weekends, bank holidays or personal holidays.
Message 2 of 6
Advisor

Re: Configuring Device Lock for Skype for Business on VVX 201

Hi Steffen,

 

As from my understanding, from UC 5.5.1 onwards when the skye for business user logged in, he suppose to create a 6 digit password and only that password is used to unlock the phone. Even the admin password won't accept at that time.

 

And the normal Lock button is inactive that moment, hence the lock parameters values we give too.

 

However the latest lock button parameters available very limitted, 

which is,

feature.deviceLock.enable

phoneLock.authorized.x.value

up.btoeDeviceLock.timeOut

up.deviceLock.createLockTimeout

up.deviceLock.signOutOnIncorrec tAttempts

 

Here, I was not able to find the timeout parameter.

 

Message 3 of 6
Polycom Employee & Community Manager

Re: Configuring Device Lock for Skype for Business on VVX 201

Hello Adarsh P S,

you may be mixing two parameters.

 

Since UC Software 5.5.1 we introduced feature parity to the known CX Phone  LYNC / Skype Pin Policy which locks the phone after a certain duration.

 

This is the 6 PIN lock code which you must enter and is defined in Skype for Business server Policy.

 

In regards of outgoing calls on a locked phone please see below parameter DisableHandsetOnLockedMachine on the server end. This is all described => here <= 

 

The feature.deviceLock.enable is a Skype for Business independent feature and described => here <=

 

Both the up.deviceLock.createLockTimeout and up.deviceLock.signOutOnIncorrectAttempts are discussed in the DEPLOYMENT GUIDE Polycom® UC Software with Skype for Business which can be found => here <=


Please ensure to provide some feedback if this reply has helped you so other users can profit from your experience.

Best Regards

Steffen Baier

Polycom Global Services

Please be aware:

The purpose of these forums is to allow community members collaborate and help each other.
Questions posted here do not follow Polycom’s SLA guidelines.
If you require assistance from Polycom technical support, please open a
web service request or call us .

The above is necessary in order to track issue internally within Polycom.

You are welcome to post more questions or configuration or logs for other community members to look at but if your issue requires a fix via Polycom you must go via the official support structure.

Please ensure you always check the VoIP , Video Endpoint , Skype for Business , PSTN or RPM FAQ's

Please remember, if you see a post that helped you , and it answers your question, please mark it as an "Accept as Solution".

This forum reply or post is based upon my personal experience and does not reflect the opinion or view of my employer.
Polycom employee participation within this community is not mandatory and any post or FAQ article provided by myself is done either during my working hours or outside working hours, in my private time, and may be answered on weekends, bank holidays or personal holidays.
Message 4 of 6
Advisor

Re: Configuring Device Lock for Skype for Business on VVX 201

Hi Steffen,

 

I have done couple of tests on latest firmware UC 5.5.1 using these parameters I was talking. And i I would like to share those details and findings.

 

I have figured out that the new firmware have a different architecture(I'm not aware of CX series method, here I'm comparing with the previous firmware) to login into S4B account.

 

The previous UC 5.4.0, the parameter "phoneLock.enabled" is used to lock the phone, and can unlock using polycom user/admin default password. And as you mentioned it is independent from Skype for Business.

The user can login to the phone using User Cred/ Pin Auth, the Pin Authentication required a 6 digit password configured in S4B server. Once the user is logged in and to unlock the locked phone, the polycom user/admin password is used.

 

The new version of UC 5.5.1 is also same procedure to login, however when the user is logged into the phone using User Cred/ Pin Auth, user is again asked to create a 6 digit pin code. And I have noticed that, this can be different from your existing PIN authentication password, and will be asked to set for each session you logged into the phone. The moment you have login and locked the phone, to unlock you need to enter this password. The default polycom user/admin password won't work here.

As per the Admin Guide, I can disable or enable this lock mechanism using feature.deviceLock.enable. 

If i disable this, the polycom default lock button will be enabled and I can use the default user/admin password to unlock phone(Provided the Lock soft key button is defined and phoneLock.enabled parameter is enabled).

 

As per my customer, they liked the new feature, as the phone is only accessible by the end-users only when they logged in. However, they would like to increase the time limit of this default lock idle timeout, or reduced the PIN authentication password length.

 

And I'm not able to find any other parameters for this in Admin Guide.

In short, the old lock has this time limit parameters, however for the new one is not there.

 

Hope you understood the scenario and clear about my question?

 

Thank You.

 

 

Message 5 of 6
Polycom Employee & Community Manager

Re: Configuring Device Lock for Skype for Business on VVX 201

Hello Adarsh P S,

let me explain and details a few things.

 

  • UC Software 4.0.0 and later introduced the phoneLock.enabled.

    The above is completely server independent and works using SIP or Skype for Business.

    The actual PIN code to unlock the phone is defined via the device.auth.localUserPassword parameter. This includes the length of the password / pin. The above locks the phone for outgoing calls (limited to the emergency numbers) and can lock the phone for inbound calls as well as answering requires a PIN / Password if the new Parameter phoneLock.Allow.AnswerOnLock is not set.

    Details => here <=

  • UC Software 5.5.1 brought the VVX phones feature parity in regards with the CX Phones known feature of the Skype for Business Server based phone lock. The above is activated as a standard and locks only the Phone menu no access to the UI of the Phone.
    The Parameter to prevent this on the phone end is feature.deviceLock.enable="0"

    You can still make and receive calls without the need of a PIN. The DisableHandsetOnLockedMachine parameter on the Skype for Business end controls this.

    You are required to add a Pin when signing into the phone for the first time. This happens on the Skype for Business  end and is controlled by the Set-CsUCPhoneConfiguration. The above feature also controls the length of the PIN via the Minimum PIN length, and in addition the Time Out via the Phone lock time-out.

    More details on this => here <=

    The above is a server feature. We only apply the policy and the only thing controlled by the Phone itself is to enable or disable the feature. The rest must be controlled via the Skype for Business server.

  • Signing into a Phone using Extension and PIN.

    Again this is a feature on the Skype for Business end. The PIN used for this is not the same as the PIN used to lock the Phone.
    The CsPinPolicy is the responsible parameter in the Skype for Business end and controls the Minimum PIN length field, the Maximum logon attempts, the Enable PIN expiration, the PIN expiration, the PIN history count and finally the Allow common patterns.

    The above does not allow Exchange Integration and this is a limitation on the Skype for Business end. This means no access to a calendar etc.

    More details => here <=

  • Signing into a Phone using Single Sign In aka Username, Domain and Password.

    The same details as above the Extension and PIN are applicable. Aka this is all controlled on the Skype for Business end.

    You can still make and receive calls without the need of a PIN. The DisableHandsetOnLockedMachine parameter on the Skype for Business end controls this.

    You are required to add a Pin when signing into the phone for the first time. This happens on the Skype for Business  end and is controlled by the Set-CsUCPhoneConfiguration. The above feature also controls the length of the PIN via the Minimum PIN length, and in addition the Time Out via the Phone lock time-out.

    The above allows full Exchange Integration.


Please ensure to provide some feedback if this reply has helped you so other users can profit from your experience.

Best Regards

Steffen Baier

Polycom Global Services

Please be aware:

The purpose of these forums is to allow community members collaborate and help each other.
Questions posted here do not follow Polycom’s SLA guidelines.
If you require assistance from Polycom technical support, please open a
web service request or call us .

The above is necessary in order to track issue internally within Polycom.

You are welcome to post more questions or configuration or logs for other community members to look at but if your issue requires a fix via Polycom you must go via the official support structure.

Please ensure you always check the VoIP , Video Endpoint , Skype for Business , PSTN or RPM FAQ's

Please remember, if you see a post that helped you , and it answers your question, please mark it as an "Accept as Solution".

This forum reply or post is based upon my personal experience and does not reflect the opinion or view of my employer.
Polycom employee participation within this community is not mandatory and any post or FAQ article provided by myself is done either during my working hours or outside working hours, in my private time, and may be answered on weekends, bank holidays or personal holidays.
Message 6 of 6