Microsoft KB Archive/305806

= XCCC: How to Enable MCU Strong Encryption for Secure Conferences =

Article ID: 305806

Article Last Modified on 10/28/2006

-

APPLIES TO


 * Microsoft Exchange 2000 Conferencing Server

-



This article was previously published under Q305806



IMPORTANT: This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs. For information about how to back up, restore, and edit the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows Registry



SUMMARY
This article describes how to configure Exchange 2000 Conferencing Server Service Pack 2 (SP2) to enforce a minimum level of encryption on the T.120 Multipoint Control Unit (MCU) server.



MORE INFORMATION
WARNING: If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.

You can configure Exchange 2000 Conferencing Server to verify and enable a certain level of encryption that is used by a client within a conference. To do so, configure the following registry key on the hosting MCU server:  Start Registry Editor (Regedt32.exe). Locate and click the following key in the registry:

HKEY_LOCAL_SOFTWARE\Microsoft\Exchange Conferencing\Parameters

 On the Edit menu, click Add Value, and then add the following registry value:Value name: MCUMinCipherStrength

Data type: DWORD

Value data: From 1 to 128

 1 to 40: A value greater than zero and less than or equal to 40 enforces minimum 40-bit encryption 40 to 56: A value greater than 40 and less than or equal to 56 enforces minimum 56-bit encryption 56 to 128: A value greater than 56 but less than or equal to 128 enforces 128-bit encryption</li></ul> </li> Quit Registry Editor.</li> Start the Services program, and then restart the Microsoft Exchange T.120 MCU Conferencing Service.</li></ol>

If users attempt to connect to the MCU server by using an Internet browser encryption level that is lower than the enforced encryption level, the user's connection fails. Users that attempt to connect by using Microsoft NetMeeting may receive the following error message:

The other person did not allow you to join the meeting.

Additional query words: exch2kp2w

Keywords: kbinfo KB305806

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.