AES encryption to "When available" bug in software ver 3.0.5

[Anonymous]

Hi,

We have a Polycom HDX 9001, software version 3.0.5 - 22695, and I have found a bug in "AES Encryption".

In Admin Settings > General Settings > Security > Security Settings, if "AEs Encryption" is set to "Required for all calls".

I set it to "When available".  If I restart the terminal and check the option again, it's set back to "Required for all calls".  Very annoying bug.

[Anonymous]

Is your system connected to ms lync 2010 or 2013 ??

By default ms lync needs encryption and therefore, when connected, the hdx also sets this value to "required for all calls" (expected behaviour). You can solve that problem by setting ms lync to "support encryption".

CMDlet: set-CsMediaConfiguration -EncryptionLevel supportencryption

As the latest version for the hdx series is 3.1.1.3, you should consider to upgrade your machine.

[Anonymous]

Yes, you are correct, we have Lync 2010 and the HDX 9001 is registered to our Lync 2010 system.

I'm not the admin of Lync system.  I'll forward your message to our Lync admin and see if he understands what you means.

[Anonymous]

In another post, I've learnt that we are not eligible to version 3.1.  Is this bug of "AES encryption" corrected in ver 3.1 without that CMDlet?  Or they have nothing to do with each other?

[Anonymous · Accepted solution]

As this is not a bug...it isn´t "solved" in 3.1.1.3.

The CMDlet on the lync will set the server to support encryption.

This means that normal calls between lync clients stay encrypted but the hdx system is able to talk encrypted to lync clients and also unencrypted with endpoints, that don´t support encryption.

Otherwise, if a vc endpoint isn´t able to encrypt, the call wouldn´t be established.

[Anonymous]

Thank you for your further explanation 🙂

[Anonymous]

No problem...you´re always welcome 🙂

[Anonymous]

There is actually a more logical solution but I don't think Polycom would spend human resource to implement it.  The solution is to introduce one more option called "When required" (along side with "When available", "Required for video calls only" and "Required for all calls")

[Anonymous]

Hi.

The cmdlet did allow my HDX to set AES encryption to "When available".  Thanks

[Anonymous]

Great to hear...thanks for posting your feedback 🙂