A security database is located on the IP Office which controls all local access, plus remote access to other IP Office components. These security settings have initial default values, can be modified by IP Office Manager or IP Office Web Manager, and cover the following areas:

• Administrative accounts

• An inviolate security administration account

• Users' password and account policy

• Trust Store (Trusted Certificate Store)

• Identity certificates

• Received certificate checks

• Service interface security controls

• Legacy interface controls

The security settings are separate to the IP Office configuration, always secured and cannot be saved or edited offline.

In addition to the IP Office security settings, Avaya one-X® Portal for IP Office, Voicemail Pro, WebLM and Web Control have local administrative accounts used under fall-back conditions.