Adding Polycom HDX8000 to TMS with security mode

I have been adding Polycom HDX8000 to Cisco TMS but doing so i had to disable security mode on HDX8000 which enables SNMP (SNMP needs to be enabled on HDX8000 to get identified during adding process in TMS)
I am able to add HDX8000 to TMS but in doing so the HDX is now being accessed using http since security mode is disabled.As per the security norms all HDX's needs to have secured web access (https), if i enable security mode on HDX then SNMP is disabled resulting in TMS loosing control over HDX (error on TMS:"no snmp response")
Basically i want to enable SNMP at the same time have https only access to HDX8000
Has anybody else encountered the above mentioned situation ?
TMS 14.4.0
hdx8000- 2.5.1 - 3.1.6

In order for TMS to control the Polycom HDX, you'll need to disable Secure Mode. How to setup TMS and the HDX to work together, see the TMS Product Support Guide, it's outdated being it was for TMS 13.x, but it's still valid when it refers to the HDX and what needs to be configured. It mentions about disabling Secure Mode, and using a security profile of medium or below. Just from looking at the Polycom HDX Admin Guide, on pg 311 at the medium security profile details, it looks like you could tweak the security profile when secure mode is disabled and maybe change the web port to 443 instead of 80, though this is just a guess and untested.

Similar Messages

TAPS in cucm secure mode (mixed mode)

hi guys,
as far as my research goes, the TAPS will not work in cucm with secure mode because it does not allow auto registration. the option is to make it non-secure, deploy phones using TAPS and then make it secure. but this will not work for us at this point because we have already 200 phones deployed and in production.
is there any better way to deploy 1200 phones. I mean I can scan macs and assign to users and bulk import but it will be a nightmare for 1200 phones as we need to know each and every mac to user assignment. this require separation by floors and departments.
thanks in advance.
vijay

1. Check your ports, make sure they are open.
2. For password sync you'll need to have SSL certificates configured so AD, OIM and the connector can talk securely. Make sure the proper keystore is used and certificate is present on all 3 (the connector includes the guide to install them)
With the above I got my connector working to this point. Hope that helps.
- JP

Performance Issues with Acrobat Reader 11.0.0.2 when secure mode is enabled

Hello All,
We are experiencing sporadic issues with Acrobat 11.0.0.2 across our domain, users are reporting performance issues when opening PDF documents whether locally or from a network share.
We have found that turning off Secure Mode helps towards reducing this delay and in the cases it doesn't we are repairing the installation and/or reinstalling the application.
Due to the security implications we need to leave this turned on, I am wondering if anyone has encountered this issue and what steps were taken towards resolving it?
I also wonder whether the white list function in the new release 11.0.0.3 would be a solution to this issue?
Kind Regards,
Ryan McCarty

No probelm, so....
We had no problems with Adobe Reader 9 and 10, we encountered the issues when upgrading to 11.0.0.2.
Initially we found that turning off the Protected Mode, helped but did not resolve the issue.
We tried;
1. Turn off protected mode - issue still present
2. Clearing the recent file registry using the below registry path and deleting the keys underneath it.
HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\11.0\AVGeneral\cRecentFiles (this does not turn recent files off permanently). - works but needs clearing regularly
3. Turning off welcome screen by creating - HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Adobe\Acrobat Reader\11.0\FeatureLockDown\cWelcomeScreen - works to improve app open speed.
4. uninstall/reinstall of 11.0.0.2 - works most likley due to the recent files being cleared.
5. upgrade to 11.0.0.3 - issue still present
Following reboots the issue is still present.
When Adobe Reader is the only application open this issue is still present.
As mentioned I have no systems available which I could test this issue using 11.0.0.1 as we have fixed them, albeit temporarily using the reinstall method.
I am concious that this issue is going to reoccur once that cache (recent files) builds back up because the fix above (#2) is clearing the recent files cache NOT disabling it.

I am not having problems with wifi but ipad will not accept my password in the secure mode. anyone else having the same problem?

I am having problems with the Ipad accepting my password in the secure mode in Wifi. I can get into wifi when the secure mode is off. This only started when I downloaded the lastest update for the Ipad. Anyone else having the same problems? I have rebooted the Rotar and still doesn't work.

I am not.
Which secure mode are you using with your wireless network - WEP or WPA?
Have you tried forgetting this network on your iPad, and/or resetting network settings on your iPad? Both will require rejoining the network and the latter will require rejoining every wi-fi network your iPad has access to when returning within range of the network.

Sharing a PM's project with a TeamMember using SharePoint Security Mode

When using SharePoint Security Mode, is it possible for a Project Manager to share a his project plan with a particular Team Member? If so what are the steps?
I am asking because we want certain Team Member to be the Status Manager for certain assignments in the project plan.
Thanks in advance,
\Spiro Theopoulos PMP, MCITP. Montreal, QC (Canada)

Hi Spiro,
Have you tried assigning the particular Team member to the Owners group for that Project/Site so the team member can edit the project?
Paul

BI Publisher with Oracle e-Business Suite 11i in EBS security mode

Seems I submitted below in wrong forums earlier so posing to correct one now. Appreciate any help.
Hi All,
I want to configure BI Publisher that comes as a part of OBIEE in Oracle E-Business Suite security mode. My Oracle E-Business Suite 11i runs on 3 node RAC database and 3 node apps tier/cm tier. As per configuration guide, I changed security mode in BIP to 'Oracle E-Business' and uploaded DBC file from E-business suite Web&Forms tier. In DBC file TWO_TASK parameter has value of test_806_BALANCE which is just an alias in tnsnames.ora for load balancing. Now when I go to BI publisher and click on 'Roles and Permission' tab in security center, it gives me 500 Internal server error.
But if I change this TWO_TASK value to any particular RAC instance sid, I am able to see all responsibility in Roles and Permission tab. This seems that BI Publisher makes jdbc connection url to database on the fly by reading DB_HOST, dB_Port and TWO_TASK parametes from dbc file and due to this my BI Publisher is single point of failure if the RAC instance goes down which I mentioned in DBC file. Even though E-Business Suite is in HA, BI publisher is not taking advantage of this HA db.
Any one has idea how to over come this situation.

You can try for a luck by posting the thread in BI Publisher Section of this Forum..

WRTG42 v1 Need help with changing the Security Mode

I need to change my wireless security mode but for some reason whenever I try to change anything the website automatically puts what ever I changed back to normal. Basically, I try to change an option and the website changes the option back instantly. Has anyone else had this issue? And if so, can you please walk me through what you did? Thanks!

Try using a different browser and make sure you click on Save Settings after changing security settings. Here's a link for detailed instructions.

Added a scanner with Secure Easy Setup and my wireless network has disappeared?

I just replaced my fax/scanner. I have a secured wireless home network. I installed the fax/scanner with Secure Easy Setup. The fax works - but my home network as disappeared!!! Where did it go? Do I have to start over and reinstall my whole wireless network? It took me forever to get it working the first time! HELP!!!

when u run easilink again it will give you the chance to change some settings wirelessly, it could be that you have changed some settings and missed that part...
you could check that by accessing the set up page of the router 192.168.1.1

Error "server with secure communication unavailable" when adding iCloud account to iCal

I have set up iCloud and activated the Calendars option, but can see iCloud in iCal. Whenever I try to manually add an iCloud account from the iCal preferences I get an error "Server with secure communication unavailable" and it won't add the iCloud account.
Does anybody have a soluton for this issue?

Hi I think I have tried this correctly but it just doesn't work for me I am replacing with:
https://www.google.com/calendar/dav/[email protected]/user//www.google.com/calendar/dav/[email protected]/user
my company email address and I have tried with /user at the end and without and am not using gmail but still no go, I have just upgraded to Air and its driving me crackers that this no longer works.
Any other suggestions welcome :/

Mobility Secure Mode

Hello,
We are working with WLC 5508 version 7.0.98.0 and we want to secure (encrypt) mobility messages between controllers but the command "config mobility secure-mode enable" apparently doesn't exist in this WLC version.
Does anybody know how to configure secure mode for mobility messages (udp port 16667) on this WLC version?
Thanks in advance.
Regards,
Mario

Hi Mario,
This is not possible anymore. If you check the 7.0 config guide there is no mention of secure mode anymore.
In the 5.1-5.2-6.0 config guides, they added a note to say that the secure mode was not supported even if command was present in command line.
So this is not configurable since some versions already.
I heard something is coming to replace this need but no idea what it will be yet.
Regards,
Nicolas
===
Please rate posts that you find useful

Essbase native security mode and MSAD users

Hi guys,
I'm trying to solve following question:
I need to keep Essbase in native security mode, ie. to assign security for users directly in EAS, not in HSS console. And I need to grant access to MSAD users, ie. to allow users to connect to Essbase using their MSAD usernames and passwords.
How to do that?
Thanks!
Vladino

You don't state what release you're on -- I think it varies slightly from release to release although the concept is mostly the same.
Have you read this in the EAS help?
http://download.oracle.com/docs/cd/E17236_01/epm.1112/eas_help/extauthen.html
I think this help is missing the step where you tell Essbase what the external authenticators are. From reading about the AUTHENTICATIONMODULE Essbase.cfg setting:
http://download.oracle.com/docs/cd/E17236_01/epm.1112/esb_tech_ref/authenticationmodule.html
It seems that:
When you run Oracle's Hyperion Enterprise Performance Management System Configurator, Essbase is automatically registered with Shared Services (unless you select the option to deploy Essbase in standalone mode) and this setting is automatically added to essbase.cfg.So I'm not quite sure where that leaves you -- where do you config the external authentication? Hopefully someone more installation-centric than I (which would be just about everyone in the known universe) can jump in here. I have to say that I haven't used non-Shared Services authentication since System 9 came out -- it just makes life too easy for my clients to manage security in one place.
Regards,
Cameron Lackpour

Issue with Airplane Mode on legitimately unlocked iPhone

Hi,
I bought an iPhone in Australia from a distributor for one of the large carriers. I bought the white 16Gb outright and paid the fee to have the phone unlocked (as is permitted in Australia). It all worked well with both an Aus and a UK SIM card I had.
The white plastic back then cracked so I took it to an Apple store where they replaced it. I told the Genius that I'd had it unlocked and he said no problems, etc, etc.
He replaced the phone and I took it home, all seemed to work well. Again, with both SIMs.
I installed the 2.2 firmware upgrade.
Now to the troublesome bit.
Sitting in Melbourne airport, about to leave Australia for some significant time, I swapped the SIMs over and the phone started complaining about needing to be connected to iTunes.
I did this and it unlocked (again).
Question 1: Do I really have to connect to iTunes every time I change the SIM?
I replaced the SIM with my Aus one and turned the phone off to fly to Kuala Lumpur. On arrival in KL I swapped SIMs again, went through the hassle of connecting to iTunes to unlock.
Then, as I wanted to use the phone on my net flight to watch movies and play Fuzzle, I turned on Airplane Mode with the UK SIM.
The phone instantly complains about the SIM being changed and asks to be connected to iTunes. I did this (getting annoyed at this point)! This time, iTunes reports that the phone is fauly and I should take to an Apple Store
I then replaced the SIM with my Aus one, and it all started working nicely again including allowing me to use Airporne Mode.
Question 2: Why can't I use Airplane Mode when my UK SIM is installed?
This seems like a bug to me, rather than some complication with Airplane mode. Surely if my phone has been unlocked and I can make calls with both SIMs, then I can use Airplane Mode regardless of which SIM I'm using?
Added complication here is that I'm not going back to Australia for a while (maybe years), so unless Apple are nice to me and decide that the phone is faulty and will replace it in the UK, I'm going to be left with an expensive, and white, iPod Touch.
Cheers for any suggestions,
Ian

I don't think the problem lies specifically with the SIM card, but with the software on the phone.
I would appreciate others trying to replicate my problem with their iPhones. Simple steps (requireing an unlocked iPhone) are...
1. Insert original SIM card (all should be fine)
2. Remove orginal SIM card and replace with second carrier SIM
3. Sync with iTunes to get the phone working again.
4. Either turn on Airplane Mode or turn the phone off and on again.
5. The phone (at least mine) will require you to connect to iTunes again.
Turning on Airplane Mode or turning the phone off and on with the original SIM card inserted doesn't lead to this behaviour.
Ian

When will Office 2013 Offline File Cache for IE add in work with Enhanced mode?

The Office 2013 Document Cache Uploader IE Plugin is incompatible with IE 11 running in enhanced mode.
I read that enhanced security mode was enabled by default in Win8 so Microsoft can collect information and advise third party plug-in developers they need to update their stuff to work with it. Then in November, Microsoft started shipping Win8 with enhanced
security disabled. But Win8.1 now ships with enhanced mode enabled... But... Microsoft's own plug-in with the latest versions don't work with it. The solution / workaround is to disable enhanced protection mode. (I don't see this
as a solution for me, my last virus infection because of insecure IE cost me over $400 to fix.) When are you going to fix your own stuff? Or will you retire it like a bunch of other goodies ripped out of Win8. And Server 2012. And Exchange
2013........Lastpass.com has their plug-in working with enhanced mode... Why can't you fix it? Should not be that tough to fix and to include it in a Office update....

Hope there will be a fix soon....This should not be marked as 'answer'. You simply state the fact that it is broken as I did and to disable IE Enhanced (warning/warning) and that is not an answer or a workaround..
Somebody please at least look at it and come up a quick and cheap, down and dirty way to add this to the trusted zones so it will work? then you can mark as answer. Everyone there at Microsoft sitting around waiting for someone else
or other department to do it. Lastpass make it work, Logmein make it work, but Microsoft resting on their laurels .......My gosh, I paid $439 for a copy of Office Pro 2013 Professional to upgrade my Office 2010 and it does not work as well as 2010 did?
In this respect, the product is a Lemmon. I already moved to the cloud for Exchange like they wanted me to, by crippling connection with this to my church's Exchange 2003 server.
It seems the master plan behind this release is to disable function with Server2003 to drive more Exchange server or Cloud hosting sales. Please make sure the product does what it did before, before you take my money and turn off the lights on important
feature oversites.
Any way to hack into Office 2010 and load its cache uploader to run in enhanced zone, or put a link or dll in the trusted zone to make this feature work again? Can someone at Microsoft at least get it on the project board or bump it up a hundred spaces
on priority list? Maybe offer a bonus to the programmer that fixes it. A weekend on the hiking trail or kayak excursion, or rock-climbing pass.. Microsoft guys like that outdoors kinds of stuff and will work like crazy to get it.

The dreaded 404 message using basicHttpBinding, Transport security mode, and certificates

I am working on setting up a WCF service using mutual authentication with both client and server certifiates. The service is hosted in IIS 7, and I'm trying to access it from a simple console app. When I try to connect to the service, I get the error ""There
was no endpoint listening at
https://localhost/IISHostedService/MyService.svc that could accept the message. This is often caused by an incorrect address or SOAP action. See InnerException, if present, for more details." The inner exception is "The remote server returned an error:
(404) Not Found."
I have seen people all over the net reporting this error, but so far none of their fixes work for me. I have an HTTPS binding in IIS for my app, and I am able to browse to my service (using either http or https) and view it with no problems. I can get the
wsdl (also over either protocol) with no issues, but connecting from the client doesn't work.
Here is my server config:
<system.serviceModel>
<behaviors>
<serviceBehaviors>
<behavior>
<serviceCredentials>
<serviceCertificate findValue="ServerCertificate" storeLocation="LocalMachine" x509FindType="FindBySubjectName" />
<clientCertificate>
<authentication revocationMode="NoCheck" />
</clientCertificate>
</serviceCredentials>
<serviceMetadata httpGetEnabled="true" httpsGetEnabled="true" />
<serviceDebug includeExceptionDetailInFaults="true" />
</behavior>
</serviceBehaviors>
</behaviors>
<serviceHostingEnvironment multipleSiteBindingsEnabled="true" />
<bindings>
<basicHttpBinding>
<binding name="BasicHttpBinding_MyService">
<security mode="Transport">
<transport clientCredentialType="Certificate" />
</security>
</binding>
</basicHttpBinding>
</bindings>
<services>
<service name="MyService">
<endpoint binding="basicHttpBinding" bindingConfiguration="BasicHttpBinding_MyService" contract="Namespace.IContract" />
</service>
</services>
</system.serviceModel>
And my client:
<system.serviceModel>
<behaviors>
<endpointBehaviors>
<behavior name="clientEndpointBehavior">
<clientCredentials>
<clientCertificate findValue="ClientCertificate" storeLocation="LocalMachine" x509FindType="FindBySubjectName"/>
</clientCredentials>
</behavior>
</endpointBehaviors>
</behaviors>
<bindings>
<basicHttpBinding>
<binding name="BasicHttpBinding_MyService" closeTimeout="00:10:00"
openTimeout="00:10:00" receiveTimeout="00:10:00" sendTimeout="00:10:00"
allowCookies="false" bypassProxyOnLocal="false" hostNameComparisonMode="StrongWildcard"
maxBufferSize="65536" maxBufferPoolSize="524288" maxReceivedMessageSize="65536"
messageEncoding="Text" textEncoding="utf-8" transferMode="Buffered"
useDefaultWebProxy="true">
<readerQuotas maxDepth="32" maxStringContentLength="8192" maxArrayLength="16384"
maxBytesPerRead="4096" maxNameTableCharCount="16384" />
<security mode="Transport">
<transport clientCredentialType="Certificate" />
</security>
</binding>
</basicHttpBinding>
</bindings>
<client>
<endpoint address="https://localhost/IISHostedService/MyService.svc behaviorConfiguration="clientEndpointBehavior"
binding="basicHttpBinding" bindingConfiguration="BasicHttpBinding_MyService"
contract="Namespace.IContract" name="BasicHttpBinding_MyService" />
</client>
</system.serviceModel>
I am not sure if it matters, but this client and server are running on the same physical machine in a test environment. I have confirmed that both the client and the server certificates are installed, and that the issuing authority is trusted. The virtual
folder is set in IIS to "Accept" client certificates, and SSL is not required.
Does anyone have any thoughts what I may be missing? This service works without a problem over HTTP, so it has to be somehow related to the certificate that is being passed. With the Server certificate, I just trapped the ServicePointManager.ServerCertificateValidationCallback
event to manually approve the certificate if the subject matched what I was looking for (the subject does not match the domain name, since this is a test environment). Do I need to do something similar for the client certificate?
EDIT: One thing I do notice is that, in the WSDL, the soap location is always pointing to http. I'm not sure if that is correct or not:
<wsdl:service name="MyService">
<wsdl:port name="BasicHttpBinding_MyService" binding="tns:BasicHttpBinding_MyService">
<soap:address location="http://computerName.domain.com/IISHostedService/MyService.svc" />
</wsdl:port>
</wsdl:service>

A little more information (since this is the main thing I have to work on today):
After some research, I decided to try using a custom certificate validator, in case something is wrong with the client certificate. In the clientCertificate\authentication node on the server, I set the certificateValidationMode="Custom" and set customValidationType="MyType.Validator,
MyType". My type is apparently being found (when it is not found I get a "service could not be activated" error), but my Validate() method is never being called.
Now this leads me to believe that it's not a problem with the client certificate, but something else, before it even gets that far.

Unable to launch Adobe Reader using ShellExecute with Protected Mode on

HI
Using the latest Adobe Reader 11.0.9, I open a PDF via ShellExecute in a legacy 32bit application, I get an unsupported configuration dialog and prompt to open with Protected Mode disabled always, once or don't open.
I need it to open with Protected Mode enabled.
The folder is in the Security (Enhanced) Privileged Locations.
I turned Protected Mode logging on and I see these messages when I call ShellExecute:
[12:02/18:17:12] interceptions setup failed - error:0x0
[12:02/18:17:12] Failed to add target - error:0x0
[12:02/18:17:12] Failed to launch sandbox process. ResultCode: 1 error:0x5A4
[12:02/18:17:12] Sandbox Process Initialization Failed - error:0x5A4
I've read the Unsupported Configurations section of the Protected Mode Troubleshooting guide but nothing matches my system as far as I can tell.
I am running the 32bit legacy application in Windows Server 2008 R2 (64bit) as a member of Domain Administrators
What can you suggest is the unsupported configuration?
Thanks
Craig

I've tried another PDF viewer and it works fine so I think it's time to say goodbye to Adobe Reader.

Adding Polycom HDX8000 to TMS with security mode

Similar Messages

Maybe you are looking for