Office Communicator 2007 R2: “Incompatible security setting. The call could not be completed because security levels do not match“
We have been piloting a pair of CX5000 devices, a LifeSize device, and native Communicator 2007 R2 clients to test interoperability with SIP and VOIP within our OCS 2007 R2 environment.
After authorizing the LifeSize device and trying to successfully start an OCS Live meeting, we immediately received the error:
“Incompatible security setting.
The call could not be completed because security levels do not match“
At the Communicator level there are 3 levels of security when it comes to encryption. There are also varying settings on the 3rd party devices.
Here is an example of 3 levels of security on the devices that support VOIP or Dial Plans:
|SIP Secured||Enabled (required)||Disabled|
|Secured||Enabled (required)||Enabled (required)|
On the OCS Communicator Client there are also 3 levels of security you can set.
- 0 = Support encryption, but do not require it. Should only be used with the TLS network protocol. (default)
- 1 = Require encryption. Unencrypted calls are not accepted. Should only be used with the TLS network protocol.
- 2 = Do not support encryption. Encrypted calls are not accepted.
These levels are configured with a group policy settings (the communicator.adm file) or by manually editing the registry. The easiest option is to use the Local Security Policy and load the communicator.adm file.
Here are the steps to do so:
We first need to copy the communicator.adm security template from the OCS 2007 Client installation directory. This can be accessed by the going into the support directory in the OCS 2007 client install folder. If this doesn’t exist, contact your Administrator to obtain the file. Or you can download it from Microsoft here. (Communicator.adm)
Once you have the Communicator.adm template, Click on Start –> Run and type “MMC”
Once the MMC has loaded click on Add\Remove, click Add and select “Group Policy Object Editor” from the list. Click Add, Select Local Computer and Close.
Expand the local computer configuration, Expand Windows Settings and highlight Administrative Templates. Right click and select Add template. Browse to the directory you saved the communicator.adm file. Open the file.
Now expand the Admin Templates, Expand Microsoft Office Communicator and then select the Microsoft Office Communicator Feature Policies. Locate the setting “Specify encryption for computer-to-computer audio and video calls”
Set this setting to Enable.
Restart the OCS Client and you should be all set.