Home > Office Communicator 2007 R2 > Office Communicator 2007 R2: “Incompatible security setting. The call could not be completed because security levels do not match“

Office Communicator 2007 R2: “Incompatible security setting. The call could not be completed because security levels do not match“

We have been piloting a pair of CX5000 devices, a LifeSize device, and native Communicator 2007 R2 clients to test interoperability with SIP and VOIP within our OCS 2007 R2 environment. 

After authorizing the LifeSize device and trying to successfully start an OCS Live meeting, we immediately received the error:

Incompatible security setting.
The call could not be completed because security levels do not match

After some initial research, we have found the problem to be related to encryption settings on the Communicator 2007 R2 client\host.
I found a good article (http://www.digitalfreakz.nl/index.php/tag/ocs-2007/) that goes into some detail.
 

At the Communicator level there are 3 levels of security when it comes to encryption.  There are also varying settings on the 3rd party devices.

Here is an example of 3 levels of security on the devices that support VOIP or Dial Plans:

VoIP Security

Mutual TLS

SRTP

Unsecured Disabled Disabled
SIP Secured Enabled (required) Disabled
Secured Enabled (required) Enabled (required)

 

On the OCS Communicator Client there are also 3 levels of security you can set.

  • 0 = Support encryption, but do not require it. Should only be used with the TLS network protocol. (default)
  • 1 = Require encryption. Unencrypted calls are not accepted. Should only be used with the TLS network protocol.
  • 2 = Do not support encryption. Encrypted calls are not accepted.

These levels are configured with a group policy settings (the communicator.adm file) or by manually editing the registry.  The easiest option is to use the Local Security Policy and load the communicator.adm file.

Here are the steps to do so:

We first need to copy the communicator.adm security template from the OCS 2007 Client installation directory.  This can be accessed by the going into the support directory in the OCS 2007 client install folder.  If this doesn’t exist, contact your Administrator to obtain the file.  Or you can download it from Microsoft here.  (Communicator.adm)

image

Once you have the Communicator.adm template, Click on Start –> Run and type “MMC”

Once the MMC has loaded click on Add\Remove, click Add and select “Group Policy Object Editor” from the list.  Click Add, Select Local Computer and Close.

image

 

Expand the local computer configuration, Expand Windows Settings and highlight Administrative Templates.  Right click and select Add template.  Browse to the directory you saved the communicator.adm file. Open the file.

image

 

Now expand the Admin Templates, Expand Microsoft Office Communicator and then select the Microsoft Office Communicator Feature Policies.  Locate the setting “Specify encryption for computer-to-computer audio and video calls”

image

Set this setting to Enable.

image

Restart the OCS Client and you should be all set.

Advertisements
  1. No comments yet.
  1. No trackbacks yet.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: