在 Lync Server 2013 中設定 Lync Phone Edition 的安全性設定Configure security settings for Lync Phone Edition in Lync Server 2013

 

主題上次修改日期: 2013-02-23Topic Last Modified: 2013-02-23

透過您的 SIP 安全性設定和電話鎖定設定,協助改善執行 Lync Phone Edition 之裝置的安全性。Help improve the security of devices running Lync Phone Edition via your SIP security setting and phone lock settings.

設定 Lync Phone Edition 的安全性設定To configure security settings for Lync Phone Edition

  1. 從指派給 CsUserAdministrator 角色或 CsAdministrator 角色的使用者帳戶,登入內部部署中的任何電腦。From a user account that is assigned to the CsUserAdministrator role or the CsAdministrator role, log on to any computer in your internal deployment.

  2. 開啟瀏覽器視窗,然後輸入管理 URL 以開啟 Lync Server 控制台。Open a browser window, and then enter the Admin URL to open the Lync Server Control Panel. 如需您可以用來啟動 Lync Server 控制台之不同方法的詳細資訊,請參閱 Open Lync server 2013 系統管理工具For details about the different methods you can use to start Lync Server Control Panel, see Open Lync Server 2013 administrative tools.

  3. 在左導覽列中,依序按一下 [用戶端][裝置設定]In the left navigation bar, click Clients, and then click Device Configuration.

  4. [裝置設定] 頁面的裝置設定清單中,按兩下想要變更其安全性設定的設定。On the Device Configuration page, in the list of device configurations, double-click the configuration for which you want to change security settings.

  5. [編輯裝置設定][SIP 安全性] 中指定 SIP 安全性等級。建議您使用 [高] 預設等級。In Edit Device Configuration, in SIP security, specify the SIP security level. The default level is High, which we recommend using.

  6. [編輯裝置設定][電話鎖定] 下方,請選取或清除 [強制執行裝置鎖定] 核取方塊 (預設選取),並指定最小 PIN 長度限制 (預設為 6 個字元) 和逾時期限 (預設為 10 分鐘)。建議您使用這些預設值或增加 PIN 長度及/或縮短逾時期限。In Edit Device Configuration, under Phone Lock, select or clear the Enforce device locking check box (selected by default) and specify the minimum PIN length (6 characters by default) and timeout period (10 minutes by default). We recommend using these defaults or increasing the PIN length and/or decreasing the timeout period.

    注意

    如需詳細資訊,請參閱 在 Lync Server 2013 中強制進行電話鎖定For details, see Enforce phone locking in Lync Server 2013.

使用 Windows PowerShell Cmdlet 設定 Lync Phone Edition 電話的安全性設定Configuring Security Settings for Lync Phone Edition Phones by Using Windows PowerShell Cmdlets

您可以使用 Lync Server 管理命令介面和 Get-CsUCPhoneConfiguration Cmdlet 來管理安全性設定。Security settings can be managed by using Lync Server Management Shell and the Get-CsUCPhoneConfiguration cmdlet. 您可以從 Lync Server 2013 管理命令介面或從 Windows PowerShell 的遠端會話中執行此 Cmdlet。This cmdlet can be run either from the Lync Server 2013 Management Shell or from a remote session of Windows PowerShell. 如需使用遠端 Windows PowerShell 連接至 Lync Server 的詳細資訊,請參閱 Lync Server Windows PowerShell 博客文章「快速入門:使用遠端 PowerShell 管理 Microsoft Lync Server 2010」 at https://go.microsoft.com/fwlink/p/?linkId=255876For details about using remote Windows PowerShell to connect to Lync Server, see the Lync Server Windows PowerShell blog article "Quick Start: Managing Microsoft Lync Server 2010 Using Remote PowerShell" at https://go.microsoft.com/fwlink/p/?linkId=255876.

修改 SIP 安全性模式To modify the SIP security mode

  • 這個命令會將 UC 電話設定全域集合的 SIPSecurityMode 設為 Medium,亦會將 SIP 安全性設為 Low 或 High (預設值)。This command sets the SIPSecurityMode for the global collection of UC phone settings to Medium. SIP security could also be set to Low or High (the default value).

    Set-CsUCPhoneConfiguration -Identity global -SIPSecurityMode "Medium"
    

修改最小 PIN 長度To modify the minimum PIN length

  • 在此範例中,所有 UC 電話設定皆將最小 PIN 長度限制修改為 7 位數。In this example, all the UC phone settings are modified to require a minimum PIN length of 7 digits.

    Get-CsUCPhoneConfiguration | Set-CsUCPhoneConfiguration -MinPhonePinLength 7
    

如需詳細資訊,請參閱 Get-CsUCPhoneConfigurationFor details, see Get-CsUCPhoneConfiguration.