Cisco Unified Communications Manager Administration Guide, Release 6.1(1)
Credential Policy Default Configuration
Downloads: This chapterpdf (PDF - 371.0KB) The complete bookPDF (PDF - 17.26MB) | Feedback

Credential Policy Default Configuration

Table Of Contents

Credential Policy Default Configuration

Finding Credential Policy Defaults

Assigning and Configuring Credential Policy Defaults

Credential Policy Default Configuration Settings

Related Topics


Credential Policy Default Configuration


The Credential Policy Default window provides options to change the default credential policy assignment for a user and credential type (for example, end user PINs).

At installation, Cisco Unified Communications Manager assigns the system Default Credential Policy to end user passwords, end user PINS, and application user passwords. The system applies the application password that you configured at installation to all application users. You can assign a new default credential policy and configure new default credentials after installation.

Upgrades from 5.x releases automatically migrate end user passwords and PINs.

Upgrades from 4.x releases assign a default password and PIN to end users during installation.


Note The system does not support empty (null) credentials. If your system uses LDAP authentication, you must configure end user default credentials immediately after installation, or logins will fail.


You can also assign a new user credential policy, manage user authentication events, or view credential information for a user in the user configuration windows. For more information, see "Managing Application User Credential Information" section on page 105-10 for application users and "Managing End User Credential Information" section on page 106-13 for end users.

This chapter describes how to assign default credential policies to a credential group. See the "Related Topics" section for more information about changing credential information for individual users.

The following topics contain information on configuring credential policies:

Finding Credential Policy Defaults

Assigning and Configuring Credential Policy Defaults

Credential Policy Default Configuration Settings

Related Topics

Finding Credential Policy Defaults

This section describes how to find or review existing credential policy default information.


Step 1 Choose User Management > Credential Policy Default.

The Find and List Credential Policy Defaults window displays the assigned policies.

Step 2 Click the list item to display.

The window displays the credential policy default information for the policy that you choose.


Additional Information

See the "Related Topics" section.

Assigning and Configuring Credential Policy Defaults

This section describes how to assign a new credential policy and new default credentials to a credential group. At installation, the system assigns a default credential policy to the credential groups.


Note Upgrades from 5.x releases automatically migrate application and end user passwords and PINs.


Before You Begin

To assign a default credential policy other than the predefined Default Credentials Policy, you must first create the policy. Go to the "Configuring a Credential Policy" section on page 104-3 if you have not yet created the policy you want to use.

Procedure


Step 1 Choose User Management > Credential Policy Default.

The Find and List window displays.

Step 2 Click the list item to change.

The Credential Policy Default Configuration window displays with the current settings.

Step 3 Enter the appropriate settings, as described in Table 103-1, using these guidelines:

To change the applied credential policy, select the policy from the drop-down list box.

To change the default credential, enter and confirm the new credential in the appropriate fields.

To change credential requirements, check or uncheck the appropriate check boxes.

Step 4 Click the Save button or the Save icon.


Next Steps

To assign a new user credential policy, manage user authentication events, or view credential information for a user, use these procedures:

Managing Application User Credential Information, page 105-10

Managing End User Credential Information, page 106-13

To configure a unique password for a user, use these procedures:

Changing an Application User Password, page 105-9

Changing an End User Password, page 106-12

Changing an End User PIN, page 106-12

The Bulk Administration Tool (BAT) allows administrators to define common credential parameters, such as passwords and PINs, for a group of users in the BAT User Template. Refer to the Cisco Unified Communications Manager Bulk Administration Guide for more information.

End users can change PINs at the phone user pages; end users can change passwords at the phone user pages when LDAP authentication is not enabled. Refer to the documentation for your Cisco Unified IP Phone for more information.

Additional Information

See the "Related Topics" section.

Credential Policy Default Configuration Settings

Table 103-1 describes the credential policy default configuration settings. See the "Related Topics" section for related information and procedures.

Table 103-1 Credential Policy Default Configuration Settings 

Field
Description

Credential User

This field displays the user type for the policy that you selected in the Find and List Credential Policy Defaults window.

You cannot change this field.

Credential Type

This field displays the credential type for the policy that you selected in the Find and List Credential Policy Defaults window.

You cannot change this field.

Credential Policy

Choose a credential policy default for this credential group.

The list box displays the predefined Default Credential Policy and any credential policies that you created, as described in the "Credential Policy Configuration" section on page 104-1.

Change Credential

Enter up to 127 characters to configure a new default credential for this group.

Confirm Credential

For verification, reenter the login credential that you entered in the Change Credential field.

User Cannot Change

Check this check box to block users that are assigned this policy from changing this credential.

You cannot check this check box when User Must Change at Next Login is checked. The default setting for this check box specifies unchecked.

User Must Change at Next Login

Check this check box to require users that are assigned this policy to change this credential at next login. Use this option after you assign a temporary credential.

You cannot check this check box when the User Cannot Change check box is checked. The default setting for this check box specifies unchecked.

Does Not Expire

Check this check box to block the system from prompting the user to change this credential. You can use this option for low-security users or group accounts.

If this check box is checked, the user can still change this credential at any time. When this check box is unchecked, the expiration setting in the associated credential policy applies.

The default setting for this check box specifies unchecked.


Related Topics

Finding Credential Policy Defaults

Assigning and Configuring Credential Policy Defaults

Credential Policy Default Configuration Settings

Finding a Credential Policy, page 104-3

Configuring a Credential Policy, page 104-3

Credential Policy Configuration Settings, page 104-4

Deleting a Credential Policy, page 104-5

Changing an Application User Password, page 105-9

Changing an End User Password, page 106-12

Changing an End User PIN, page 106-12

Managing End User Credential Information, page 106-13

Managing Application User Credential Information, page 105-10

Credential Policy, Cisco Unified Communications Manager System Guide

Understanding the Directory, Cisco Unified Communications Manager System Guide

Application Users and End Users, Cisco Unified Communications Manager System Guide

Cisco Extension Mobility, Cisco Unified Communications Manager Features and Services Guide