# PINs (User)

## Description

A Personal Identification Number (PIN) allows a user to access features that require a PIN, for example, to log into a set such as a hot desk user or securing a phone using the Phone Lock feature.

Users will have one generic PIN that can be used for any required features.

The User PIN can be configured from the Desktop, Group Administration, and System Administration tools within ESM
Embedded System Management. An set of browser-based administrative tools in MiVoice Business software that includes the System Admin, Group Admin, and Desktop Tool. as well as from the set (if applicable). It can be set or changed from the following forms, depending on the set type:

- Analog Sets

- Multiline IP Sets

- User and Services Configuration

- Wireless IP Sets

The User PIN initially has a zero length, allowing a user to access features using a blank PIN. All three ESM tools also allow a PIN to be set to a zero length. Setting the User PIN on the set requires the PIN to have at least one digit. See the procedure below for changing a User PIN.

NOTE: The System Administrator can reset the PIN (if the user forgets his/her PIN) from the forms listed above, depending on the set type. The administrator will not be able to see the PIN value. The user then receives a new PIN. Note that the administrator can reset the PIN at anytime, even while the feature is active.

If the Hot Desk PIN Security feature is enabled, a hot desk user who logs in with a weak PIN is automatically routed to the MiCollab Nupoint UM Interactive Voice Response (IVR) system for a PIN change. See MiCollab PIN Rules and MiCollab Nupoint UM PIN Rules.

### Lockout Mechanism for Failed Log-in Attempts

After three consecutive failed log-in attempts within a five minutes, a user is locked out for fifteen minutes. No more attempts are allowed until the DISA Lock-Out timer expires. EHDU and Hot Desk users all support the lockout feature. A Hot Desk User is locked out for both SIP and MiNET devices.

In SIP, the Log-in attempt is validated when the REGISTER and SUBSCRIBE messages are authenticated. In MiNET it is done as part of PIN validation.

The number of attempts and the length of the lockout are programmable using the DISA values in the System Options form:

- DISA Failed Attempts Before Lock-Out 3-255 (default is 3)

- DISA Number Lock-Out Timer 0-15 minutes (default is 15)

## Conditions and Feature Interactions

- PIN length is device dependent and ranges from 0 to 8 digits on the 5604, 5607 and 5614 SIP Phones and 0 to 10 on other phones.

- Only digits (0 to 9) are permitted.

- The default PIN is blank (length zero).

- All SIP Phones support the lockout feature.

- Use the Busy Reset command to clear a user's lockout state.

- An existing logged in user (MiNET, EHDU, or SIP) is not affected by a lockout.

- If an unauthorized user tries to access an account, the valid user remains logged in and should notice nothing.

- A valid user that logs off while in the locked state cannot re-REGISTER from SIP or Login from MiNET until the lockout timer expires.

- MiVoice Business generates a maintenance log when a lockout occurs from an SIP or MiNET device (3000).

- While locked out, an EHDU can still take calls originating through MiVoice Business. After completing the call and receiving a dial tone, the user can originate new calls.

- Lockout is not resilient.

## Programming

To change a User PIN using the Superkey:

1. Log into the Hot Desk set (for Hot Desking only)

2. Press SuperKey (must be programmed to a key on the 5330/5330e, 5340/5340e, and 69xx IP Phones).

-OR-

If Long Key Press is enabled, hold down the Settings key to launch Superkey.

3. Press No until "Set User PIN?" appears.

4. Press Yes or User PIN softkey.

5. At the prompt "Enter Old PIN", enter your old User PIN.

6. Press Enter.

7. At the prompt "Enter new PIN", enter your new PIN (can be 1-8 digits in length, consisting only of the digits 0-9, inclusive). Use the left arrow key to correct mistakes.

8. Press Enter.

9. At the prompt to verify the PIN, re-enter your new PIN again. The set confirms successful or failed completion.

10. Press Superkey to end the Superkey session.

## Device Support

All devices

## Operation

See Phone Lock and Hot Desking - Login.

Related Topics

- Phone Lock

- Hot Desking - Login