XCCC: How to Enable MCU Strong Encryption for Secure Conferences (305806)


The information in this article applies to:

  • Microsoft Exchange 2000 Conferencing Server
This article was previously published under Q305806
IMPORTANT: This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs. For information about how to back up, restore, and edit the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows Registry

SUMMARY

This article describes how to configure Exchange 2000 Conferencing Server Service Pack 2 (SP2) to enforce a minimum level of encryption on the T.120 Multipoint Control Unit (MCU) server.

MORE INFORMATION

WARNING: If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.


You can configure Exchange 2000 Conferencing Server to verify and enable a certain level of encryption that is used by a client within a conference. To do so, configure the following registry key on the hosting MCU server:
  1. Start Registry Editor (Regedt32.exe).
  2. Locate and click the following key in the registry:

    HKEY_LOCAL_SOFTWARE\Microsoft\Exchange Conferencing\Parameters

  3. On the Edit menu, click Add Value, and then add the following registry value:Value name: MCUMinCipherStrength
    Data type: DWORD
    Value data: From 1 to 128

    • 1 to 40: A value greater than zero and less than or equal to 40 enforces minimum 40-bit encryption
    • 40 to 56: A value greater than 40 and less than or equal to 56 enforces minimum 56-bit encryption
    • 56 to 128: A value greater than 56 but less than or equal to 128 enforces 128-bit encryption
  4. Quit Registry Editor.
  5. Start the Services program, and then restart the Microsoft Exchange T.120 MCU Conferencing Service.
If users attempt to connect to the MCU server by using an Internet browser encryption level that is lower than the enforced encryption level, the user's connection fails. Users that attempt to connect by using Microsoft NetMeeting may receive the following error message:
The other person did not allow you to join the meeting.
Modification Type:MinorLast Reviewed:4/25/2005
Keywords:kbinfo KB305806
©2004 Microsoft Corporation. All rights reserved.