About Login Accounts; Account Authentication; Account Types - Cisco TelePresence Administrator's Manual

About login accounts

The VCS has two types of login account for normal operation:
Administrator accounts: used to configure the VCS.
n
User accounts: used by individuals in an enterprise to configure their FindMe profile. They can also be
n
used to enable basic device provisioning when the Starter Pack option key is installed.
Note that the user account configuration via VCS does not apply if the VCS is using the
Extension services to provide user account data.

Account authentication

Administrator and user accounts must be authenticated before access is allowed to the VCS.
The VCS can authenticate accounts either locally or against a remote directory service using LDAP (the
VCS currently supports Windows Active Directory only), or it can use a combination of local and remotely
managed accounts. The remote option allows administration groups to be set up in the directory service for
all VCSs in an enterprise, removing the need to have separate accounts on each VCS. See
account authentication for more information.
If a remote source is used for either administrator or user account authentication you also need to configure
the VCS with:
appropriate LDAP server connection settings (see
n
administrator groups and/or user groups that match the corresponding group names already set up in the
n
remote directory service to manage administrator and user access to this VCS (see
administrator groups and
The VCS can also be configured to use
the VCS was deployed in a highly-secure environment.

Account types

Administrator accounts
Administrator accounts are used to configure the VCS.
The VCS has a default admin local administrator account with full read-write access. It can be used to
n
access the VCS using the web interface, the API interface or the CLI. Note that you can still access the
VCS via the admin account even if a Remote authentication source is in use.
You can add additional local administrator accounts which can be used to access the VCS using the web
n
and API interfaces only.
Remotely managed administrator accounts can be used to access the VCS using the web and API
n
interfaces only.
You can configure the complexity requirements for local administrator passwords on the
page (Maintenance > Login accounts > Password
sensitive.
Note that:
Cisco VCS Administrator Guide (X7.2)
Configuring user groups)
certificate-based
Configuring remote account authentication using
authentication. This would typically be required if
security). All passwords and usernames are case
Maintenance
TMS Provisioning
Configuring login
LDAP)
Configuring
Password security
Page 289 of 498