Cisco TelePresence Administrator's Manual page 110

Field Description
Encryption Sets the encryption to use for the
LDAP connection to the Active
Directory Service.
Off: no encryption is used.
TLS: TLS encryption is used.
The default is TLS.
Clockskew The maximum allowed clockskew (in
seconds) between the VCS and the
KDC before the Kerberos message is
assumed to be invalid. The default is
300 seconds.
Domain This section is used to define the
Controller Domain Controllers that can used by
addresses the VCS when it joins the AD domain.
You can choose to either:
use a DNS SRV lookup of the AD
n
domain to obtain the Domain
Controller addresses
manually enter the IP addresses of
n
up to 5 Domain Controllers
Kerberos This section is used to define the
Key Kerberos Key Distribution Centers
Distribution (KDCs) that can be used when
Center connected to the AD domain.
addresses
You can choose to either:
and ports
use a DNS SRV lookup of the AD
n
domain to obtain the KDC
addresses
manually enter the IP addresses of
n
up to 5 KDCs
Port numbers default to 88.
Username The AD domain administrator
and username and password.
Password
The current status of the connection to the Active Directory Service is displayed at the bottom of the page.
Cisco VCS Administrator Guide (X7.1)
Usage tips
If you use TLS encryption, you need to upload a suitable
CA certificate file.
Click Upload a CA certificate file for TLS
Security certificates page.
You are recommended to use the default behavior of
using a DNS SRV lookup.
You are recommended to use the default behavior of
using a DNS SRV lookup. Typically, the KDC addresses
will be the same as the Domain Controller addresses.
The username and password credentials of the domain
administrator are required only when you attempt to join
a domain. The VCS only needs to join the domain once,
after which the connection can be enabled or disabled
as required.
Note: for security purposes, the AD domain
administrator username and password are not stored on
the VCS. This is why you must enter the credentials
every time you attempt to join the domain.
Device authentication
to go to the
Page 110 of 479