Cisco TelePresence Administrator's Manual page 127

Device authentication
On the master peer:
1. Follow the instructions as above to configure Active Directory (direct) and join the AD domain.
2. Ensure that the master peer has successfully joined the AD domain before continuing.
On each other peer in turn:
1. Go to Configuration > Authentication > Devices > Active Directory
2. Check that the configuration entered on the master peer has been replicated to the current peer.
3. Enter the AD domain administrator Username and Password.
(These credentials are not stored by the VCS and so have to be entered each time.)
4. Click Save.
The VCS should join the AD domain. If you receive an error message, check the following:
the configuration settings on this page, including the username and password
l
the VCS's CA certificate, private key and server certificate (CA certificate information is not replicated
l
across cluster peers)
Enabling NTLM authentication challenges
When Active Directory details have been configured and the VCS has been joined into the AD domain, VCS
can now be configured to challenge Jabber Video (4.2 or later) with NTLM authentication challenges.
1. Go to Configuration > Authentication > Devices > Active Directory
2. Ensure that NTLM protocol challenges is set to Auto.
Never use On, as this will send NTLM challenges to devices that may not support NTLM (and therefore
they may crash or otherwise misbehave).
3. Click Save if required.
4. If the VCS is part of a cluster, check that any configuration changes entered on the master peer have been
replicated to each other peer.
Configuring Jabber Video and testing Active Directory database (direct)
authentication
We recommend that you use a Jabber Video configuration that already authenticates successfully using
either provisioning or VCS authentication. This means that Jabber Video's Advanced settings (Internal
Server, External Server and SIP Domain entries) are correctly configured.
1. Sign in to Jabber Video:
2. In the Username field, configure <AD Short Domain Name>\username
(this field is not case sensitive).
3. In the Password field, enter the password as configured in the Active Directory database for the chosen
user.
4. Click Sign in.
A successful registration confirms that authentication of provisioning and registration of Jabber Video to VCS
now works using Active Directory database (direct) authentication.
Cisco VCS Administrator Guide (X8.1.1)
About device authentication
Service.
Service.
Page 127 of 507