在 Lync Server 2013 中配置 Lync Phone Edition 的安全设置Configure security settings for Lync Phone Edition in Lync Server 2013

 

上次修改的主题: 2013-02-23Topic Last Modified: 2013-02-23

通过 SIP 安全设置和电话锁定设置,帮助改进运行 Lync Phone Edition 的设备的安全性。Help improve the security of devices running Lync Phone Edition via your SIP security setting and phone lock settings.

为 Lync Phone Edition 配置安全设置To configure security settings for Lync Phone Edition

  1. 使用分配给 CsUserAdministrator 角色或 CsAdministrator 角色的用户帐户登录到内部部署中的任何计算机。From a user account that is assigned to the CsUserAdministrator role or the CsAdministrator role, log on to any computer in your internal deployment.

  2. 打开浏览器窗口,然后输入管理员 URL 以打开 "Lync Server 控制面板"。Open a browser window, and then enter the Admin URL to open the Lync Server Control Panel. 有关可用于启动 Lync Server 控制面板的不同方法的详细信息,请参阅 Open Lync server 2013 "管理工具"。For details about the different methods you can use to start Lync Server Control Panel, see Open Lync Server 2013 administrative tools.

  3. 在左侧导航栏中,单击“客户端”****,然后单击“设备配置”****。In the left navigation bar, click Clients, and then click Device Configuration.

  4. 在“设备配置”**** 页上的设备配置列表中,双击要更改安全设置的配置。On the Device Configuration page, in the list of device configurations, double-click the configuration for which you want to change security settings.

  5. 在“编辑设备配置”**** 的“SIP 安全”**** 中,指定 SIP 安全级别。默认级别为“高”****,建议使用此级别。In Edit Device Configuration, in SIP security, specify the SIP security level. The default level is High, which we recommend using.

  6. 在“编辑设备配置”**** 中的“电话锁定”**** 下,选中或清除“强制设备锁定”**** 复选框(默认为选中)并指定最小 PIN 长度(默认为 6 个字符)和超时期限(默认为 10 分钟)。建议使用这些默认值或增加 PIN 长度和/或减小超时期限。In Edit Device Configuration, under Phone Lock, select or clear the Enforce device locking check box (selected by default) and specify the minimum PIN length (6 characters by default) and timeout period (10 minutes by default). We recommend using these defaults or increasing the PIN length and/or decreasing the timeout period.

    备注

    有关详细信息,请参阅 在 Lync Server 2013 中强制执行电话锁定For details, see Enforce phone locking in Lync Server 2013.

使用 Windows PowerShell Cmdlet 为 Lync Phone Edition 电话配置安全设置Configuring Security Settings for Lync Phone Edition Phones by Using Windows PowerShell Cmdlets

可以使用 Lync Server 命令行管理程序和 CsUCPhoneConfiguration cmdlet 来管理安全设置。Security settings can be managed by using Lync Server Management Shell and the Get-CsUCPhoneConfiguration cmdlet. 此 cmdlet 可从 Lync Server 2013 命令行管理程序或从 Windows PowerShell 的远程会话中运行。This cmdlet can be run either from the Lync Server 2013 Management Shell or from a remote session of Windows PowerShell. 有关使用远程 Windows PowerShell 连接到 Lync Server 的详细信息,请参阅在上的 Lync Server Windows PowerShell 博客文章 "快速入门:使用远程 PowerShell 管理 Microsoft Lync Server 2010" https://go.microsoft.com/fwlink/p/?linkId=255876For details about using remote Windows PowerShell to connect to Lync Server, see the Lync Server Windows PowerShell blog article "Quick Start: Managing Microsoft Lync Server 2010 Using Remote PowerShell" at https://go.microsoft.com/fwlink/p/?linkId=255876.

修改 SIP 安全模式To modify the SIP security mode

  • 此命令将 UC 电话设置全局集合的 SIPSecurityMode 设置为“中”。还可以将 SIP 安全性设置为“低”或“高”(默认值)。This command sets the SIPSecurityMode for the global collection of UC phone settings to Medium. SIP security could also be set to Low or High (the default value).

    Set-CsUCPhoneConfiguration -Identity global -SIPSecurityMode "Medium"
    

修改最小 PIN 长度To modify the minimum PIN length

  • 在此示例中,会将所有 UC 电话设置修改为需要 7 位最小 PIN 长度。In this example, all the UC phone settings are modified to require a minimum PIN length of 7 digits.

    Get-CsUCPhoneConfiguration | Set-CsUCPhoneConfiguration -MinPhonePinLength 7
    

有关详细信息,请参阅 CsUCPhoneConfigurationFor details, see Get-CsUCPhoneConfiguration.