System administrator access, Overview, About administrator access – TANDBERG Security Camera User Manual
Page 20: Configuring administrator access, Administrator account password, Default administrator password, Changing the administrator password, Resetting the administrator password, Administrator session timeout, Security considerations
20
D14049.03
MAY 2008
Grey Headline (continued)
About Administrator Access
While it is possible to administer the TANDBERG VCS via a PC
connected directly to the unit via a serial cable, you may wish to
access the system remotely over IP.
You can do this using either or both:
the
•
via HTTPS
a
•
via SSH or Telnet.
By default, access via HTTPS and SSH is enabled; access via
Telnet is disabled.
You can also enable access via HTTP. However, this
mode works by redirecting HTTP calls to the HTTPS port,
so HTTPS must be enabled for access via HTTP.
Overview
Security Considerations
To securely manage the VCS you should disable Telnet, using the
encrypted HTTPS and SSH protocols instead.
For further security, disable HTTPS and SSH as well and use the
serial port to manage the system.
Configuring Administrator Access
To configure the ways in which your system is accessed:
System Configuration > System
•
.
You will be taken to the
System Administration
page.
In the
Admin Access
section, select
Off
or
On
from the drop-
down boxes for each service.
Administrator Account Password
All administration requires you to log in to the administration
account with the username
admin
(all lower case) and a
password. Both the username and password are case-sensitive.
Default Administrator Password
The default password is
TANDBERG
(all upper case). You should
change this as soon as possible. Choose a strong password,
particularly if administration over IP is enabled.
Changing the Administrator Password
To change the administrator password:
Maintenance > Passwords.
•
You will be taken to the
Passwords
page.
In the
Administrator Password
section, enter and then retype
the new password.
To set an empty password via the web UI, tick the
Delete
password
box.
xConfiguration SystemUnit Passwor
To set an empty password via the CLI, type:
xConfiguration SystemUnit Password: ""
Resetting the Administrator Password
If you forget your password, it is possible to set a new password
using the following procedure:
Connect a PC to the VCS using the serial cable as per the
1.
instructions in steps 1 and 2 of
Initial Configuration via Serial
.
Reboot the VCS.
2.
Login from the PC with the username
3.
pwrec
. No password is
required.
You will be prompted for a new password.
4.
Administrator Session Timeout
By default, Administrator sessions do not time out – they remain
active until you logout.
However, you can set the system to timeout an Administrator
session after a set number of minutes of inactivity. The timeout
period will apply to Administrator sessions using both the Web
Interface and the Command Line Interface.
To set the timeout period:
System Configuration > System
•
.
You will be taken to the System Administration page.
In the
Admin Access
section, in the
Session time out
(minutes)
box, enter the number of minutes of inactivity after
which an administrator session should time out.
xConfiguration Administration TimeOu
Values must be between 0 and 10,000. A value of 0 means that
Administrator sessions will never time out.
Root Account
The VCS provides a root account with the same password as
the
admin
account. This account should not be used in normal
operation, and in particular system configuration should not be
conducted using this account. Use the
admin
account instead.
!
Tandberg Management Suite (TMS) accesses the VCS via
the web server. If HTTPS mode is turned off, TMS will
not be able to access it.
You must restart the system for any changes to the
Administrator settings to take effect.
!
Because access to the serial port allows the password to
be reset, it is recommended that you install the VCS in a
physically secure environment.
The
pwrec
account is only active for one minute following
a restart. Beyond that time you will have to restart the
system again to change the password.
!
It is possible to have more than one Administrator
session running at the same time. These sessions could
be via the web interface, command line interface, or a
mixture of both. This may cause issues if each Administrator
session is attempting to make the same configuration changes.
TANDBERG
VIDEO COMMUNICATIONS SERVER
ADMINISTRATOR GUIDE
System Administrator Access