Plantronics + Polycom. Now together as Poly Logo

Configuring Device Lock for Skype for Business on VVX 201

Highlighted
Advisor

Configuring Device Lock for Skype for Business on VVX 201

Hi,

 

When my VVX 201 phone is paired with system, and when Iam locking the system the phone also gets locked and shows Away status.

 

But, when with out pairing i have logged in the phone as well as in the system, then locking the system does not change the status of my VVX phone.

 

In this scenario, I understand the device state is considered, however to reduced the auto lock time in UC 5.5.1 is not mentioned in the admin guide.

 

I could only find up.btoeDeviceLock.timeOut option which is used in paired mode.

Is there any other parameters to reduce the time limit when the phone is logged in S4B.

 

Thanks in advance.

Message 1 of 6
5 REPLIES 5
Highlighted
Polycom Employee & Community Manager

Re: Configuring Device Lock for Skype for Business on VVX 201

Adarsh P S

does a CX phone lock when you lock your PC and it is not connected via USB?

 

I am not aware how that should work. 

 

All I am aware of is the "normal" Phone lock:

 

Jun 02, 2016 Question:How can I disable the LYNC / Skype lock Policies for Polycom phones?

Resolution: Please check => here <= 


Please ensure to provide some feedback if this reply has helped you so other users can profit from your experience.

Best Regards

Steffen Baier

Polycom Global Services

----------------

Notice: This community forum is not an official Poly support resource, thus responses from Poly employees, partners, and customers alike are best-effort in attempts to share learned knowledge. If you need immediate and/or official assistance please open a service ticket through your proper support channels.
Please also ensure you always check the VoIP , Video Endpoint , Skype for Business , PSTN or RPM FAQ's
Message 2 of 6
Highlighted
Advisor

Re: Configuring Device Lock for Skype for Business on VVX 201

Hi Steffen,

 

As from my understanding, from UC 5.5.1 onwards when the skye for business user logged in, he suppose to create a 6 digit password and only that password is used to unlock the phone. Even the admin password won't accept at that time.

 

And the normal Lock button is inactive that moment, hence the lock parameters values we give too.

 

However the latest lock button parameters available very limitted, 

which is,

feature.deviceLock.enable

phoneLock.authorized.x.value

up.btoeDeviceLock.timeOut

up.deviceLock.createLockTimeout

up.deviceLock.signOutOnIncorrec tAttempts

 

Here, I was not able to find the timeout parameter.

 

Message 3 of 6
Highlighted
Polycom Employee & Community Manager

Re: Configuring Device Lock for Skype for Business on VVX 201

Hello Adarsh P S,

you may be mixing two parameters.

 

Since UC Software 5.5.1 we introduced feature parity to the known CX Phone  LYNC / Skype Pin Policy which locks the phone after a certain duration.

 

This is the 6 PIN lock code which you must enter and is defined in Skype for Business server Policy.

 

In regards of outgoing calls on a locked phone please see below parameter DisableHandsetOnLockedMachine on the server end. This is all described => here <= 

 

The feature.deviceLock.enable is a Skype for Business independent feature and described => here <=

 

Both the up.deviceLock.createLockTimeout and up.deviceLock.signOutOnIncorrectAttempts are discussed in the DEPLOYMENT GUIDE Polycom® UC Software with Skype for Business which can be found => here <=


Please ensure to provide some feedback if this reply has helped you so other users can profit from your experience.

Best Regards

Steffen Baier

Polycom Global Services

----------------

Notice: This community forum is not an official Poly support resource, thus responses from Poly employees, partners, and customers alike are best-effort in attempts to share learned knowledge. If you need immediate and/or official assistance please open a service ticket through your proper support channels.
Please also ensure you always check the VoIP , Video Endpoint , Skype for Business , PSTN or RPM FAQ's
Message 4 of 6
Highlighted
Advisor

Re: Configuring Device Lock for Skype for Business on VVX 201

Hi Steffen,

 

I have done couple of tests on latest firmware UC 5.5.1 using these parameters I was talking. And i I would like to share those details and findings.

 

I have figured out that the new firmware have a different architecture(I'm not aware of CX series method, here I'm comparing with the previous firmware) to login into S4B account.

 

The previous UC 5.4.0, the parameter "phoneLock.enabled" is used to lock the phone, and can unlock using polycom user/admin default password. And as you mentioned it is independent from Skype for Business.

The user can login to the phone using User Cred/ Pin Auth, the Pin Authentication required a 6 digit password configured in S4B server. Once the user is logged in and to unlock the locked phone, the polycom user/admin password is used.

 

The new version of UC 5.5.1 is also same procedure to login, however when the user is logged into the phone using User Cred/ Pin Auth, user is again asked to create a 6 digit pin code. And I have noticed that, this can be different from your existing PIN authentication password, and will be asked to set for each session you logged into the phone. The moment you have login and locked the phone, to unlock you need to enter this password. The default polycom user/admin password won't work here.

As per the Admin Guide, I can disable or enable this lock mechanism using feature.deviceLock.enable. 

If i disable this, the polycom default lock button will be enabled and I can use the default user/admin password to unlock phone(Provided the Lock soft key button is defined and phoneLock.enabled parameter is enabled).

 

As per my customer, they liked the new feature, as the phone is only accessible by the end-users only when they logged in. However, they would like to increase the time limit of this default lock idle timeout, or reduced the PIN authentication password length.

 

And I'm not able to find any other parameters for this in Admin Guide.

In short, the old lock has this time limit parameters, however for the new one is not there.

 

Hope you understood the scenario and clear about my question?

 

Thank You.

 

 

Message 5 of 6
Highlighted
Polycom Employee & Community Manager

Re: Configuring Device Lock for Skype for Business on VVX 201

Hello Adarsh P S,

let me explain and details a few things.

 

  • UC Software 4.0.0 and later introduced the phoneLock.enabled.

    The above is completely server independent and works using SIP or Skype for Business.

    The actual PIN code to unlock the phone is defined via the device.auth.localUserPassword parameter. This includes the length of the password / pin. The above locks the phone for outgoing calls (limited to the emergency numbers) and can lock the phone for inbound calls as well as answering requires a PIN / Password if the new Parameter phoneLock.Allow.AnswerOnLock is not set.

    Details => here <=

  • UC Software 5.5.1 brought the VVX phones feature parity in regards with the CX Phones known feature of the Skype for Business Server based phone lock. The above is activated as a standard and locks only the Phone menu no access to the UI of the Phone.
    The Parameter to prevent this on the phone end is feature.deviceLock.enable="0"

    You can still make and receive calls without the need of a PIN. The DisableHandsetOnLockedMachine parameter on the Skype for Business end controls this.

    You are required to add a Pin when signing into the phone for the first time. This happens on the Skype for Business  end and is controlled by the Set-CsUCPhoneConfiguration. The above feature also controls the length of the PIN via the Minimum PIN length, and in addition the Time Out via the Phone lock time-out.

    More details on this => here <=

    The above is a server feature. We only apply the policy and the only thing controlled by the Phone itself is to enable or disable the feature. The rest must be controlled via the Skype for Business server.

  • Signing into a Phone using Extension and PIN.

    Again this is a feature on the Skype for Business end. The PIN used for this is not the same as the PIN used to lock the Phone.
    The CsPinPolicy is the responsible parameter in the Skype for Business end and controls the Minimum PIN length field, the Maximum logon attempts, the Enable PIN expiration, the PIN expiration, the PIN history count and finally the Allow common patterns.

    The above does not allow Exchange Integration and this is a limitation on the Skype for Business end. This means no access to a calendar etc.

    More details => here <=

  • Signing into a Phone using Single Sign In aka Username, Domain and Password.

    The same details as above the Extension and PIN are applicable. Aka this is all controlled on the Skype for Business end.

    You can still make and receive calls without the need of a PIN. The DisableHandsetOnLockedMachine parameter on the Skype for Business end controls this.

    You are required to add a Pin when signing into the phone for the first time. This happens on the Skype for Business  end and is controlled by the Set-CsUCPhoneConfiguration. The above feature also controls the length of the PIN via the Minimum PIN length, and in addition the Time Out via the Phone lock time-out.

    The above allows full Exchange Integration.


Please ensure to provide some feedback if this reply has helped you so other users can profit from your experience.

Best Regards

Steffen Baier

Polycom Global Services

----------------

Notice: This community forum is not an official Poly support resource, thus responses from Poly employees, partners, and customers alike are best-effort in attempts to share learned knowledge. If you need immediate and/or official assistance please open a service ticket through your proper support channels.
Please also ensure you always check the VoIP , Video Endpoint , Skype for Business , PSTN or RPM FAQ's
Message 6 of 6