Securing Web Licence Manager

Last Updated : Apr 19, 2022 |

About this task

Web License Manager (WebLM) administrative accounts are separate to IP Office and logins to WebLM are not integrated into the IP Office AA framework.

WebLM administration is browser-based and always uses HTTPS communication.

Procedure

  1. Change the password of the default account as soon as possible.
  2. All passwords must be 'strong' and of 8 or more characters (See Password and PIN Management).
  3. For subsequent password management, go to the WebLM 'Manage Users' page. Any unused administrator accounts must be deleted.

    • Note: WebLM does not support referred authentication; local user accounts are used at all times.

  4. Any browser used for web-based management should have the CA certificate/ID certificate of the IP Office installed in the relevant trusted certificate store. It is possible in some browsers to provide temporary or permanent exceptions, but this should be avoided. For more information about certificates and browser support, see Certificates and Trust.
  5. If the application is not used, it should be disabled using the Platform View > System > Services > Automatically Start setting.
Related information
Securing IP Office Applications