Topic Last Modified: 2013-02-23

Help improve the security of devices running Lync Phone Edition via your SIP security setting and phone lock settings.

To configure security settings for Lync Phone Edition

  1. From a user account that is assigned to the CsUserAdministrator role or the CsAdministrator role, log on to any computer in your internal deployment.

  2. Open a browser window, and then enter the Admin URL to open the Lync Server Control Panel. For details about the different methods you can use to start Lync Server Control Panel, see Open Lync Server Administrative Tools.

  3. In the left navigation bar, click Clients, and then click Device Configuration.

  4. On the Device Configuration page, in the list of device configurations, double-click the configuration for which you want to change security settings.

  5. In Edit Device Configuration, in SIP security, specify the SIP security level. The default level is High, which we recommend using.

  6. In Edit Device Configuration, under Phone Lock, select or clear the Enforce device locking check box (selected by default) and specify the minimum PIN length (6 characters by default) and timeout period (10 minutes by default). We recommend using these defaults or increasing the PIN length and/or decreasing the timeout period.

    Note:
    For details, see Enforce Phone Locking.

Configuring Security Settings for Lync Phone Edition Phones by Using Windows PowerShell Cmdlets

Security settings can be managed by using Lync Server Management Shell and the Get-CsUCPhoneConfiguration cmdlet. This cmdlet can be run either from the Lync Server 2013 Management Shell or from a remote session of Windows PowerShell. For details about using remote Windows PowerShell to connect to Lync Server, see the Lync Server Windows PowerShell blog article "Quick Start: Managing Microsoft Lync Server 2010 Using Remote PowerShell" at http://go.microsoft.com/fwlink/p/?linkId=255876.

To modify the SIP security mode

  • This command sets the SIPSecurityMode for the global collection of UC phone settings to Medium. SIP security could also be set to Low or High (the default value).

    Copy Code 
    Set-CsUCPhoneConfiguration -Identity global -SIPSecurityMode "Medium"

To modify the minimum PIN length

  • In this example, all the UC phone settings are modified to require a minimum PIN length of 7 digits.

    Copy Code 
    Get-CsUCPhoneConfiguration | Set-CsUCPhoneConfiguration -MinPhonePinLength 7

For details, see Get-CsUCPhoneConfiguration.

See Also