Requiring a PIN to use an 8841 phone

[SteveK066]

My customer wants to be able to 'lock' his phone. He said previously when going off hook, he'd need a pin for the call to proceed. He had forgotten his pin, and said it was reset (it would be by our dept. but I can't find a related work order) so he could use the phone. It sounds from his explanation that enabled using the phone, but he can't lock it again. Per the customer - 

It should appear in “Administrator Settings” under “Security Setup”. There the “security mode” is set to None and cannot be changed.

On my 8851 phone Security mode displays Non secure and is grayed out. In CUCM, Device Security Profile was set to Cisco 8851 - Standard SIP Non-Secure Profile. I tried changing it to Universal Device Template - Model-independent Security Profile and various other choices, including Authenticated, and others with Encryption (didn't think that was relevant) but my Security mode is still Non secure and grayed out. Maybe this isn't even where the Admin Settings would be changed to require a pin. I wonder what the setting could be?

[Roger Kallberg]

Security mode is for encrypted communications, it’s not related to needing to use a code when making calls. Likely that would be FAC, Forced Authentication Code.

[SteveK066]

Ok. From what I understand from the customer, he would enable set and enable the pin from Admin Settings - and just going off hook would require the code. I never heard of such a thing. Anything even distantly related that I found so far references a 3rd party app. I'll look further into FAC.

[Roger Kallberg]

Definitely does not sound like a native function that exists in CM.

[SteveK066]

Sure doesn't - not likely the customer will be able to provide any relevant reference, but he said a service ticket was created to allow functionality of his phone. Sounds like the remedy was to set the phone to not require a pin at all.

I do question the requirement of the pin simultaneously when going off hook. If I find anything relevant, I will post it here. I appreciate the input.

[Nithin Eluvathingal]

Maybe they are leveraging the third-party phone lock with the budget control feature. As far as I know, it asks for a PIN to make calls if the budget is exceeded.

FAC asks for a PIN when you dial the number, and this is an admin setup code.

[SteveK066]

After all this the customer says maybe he was mistaking it for his voicemail PIN. The only reference he could find was a ticket when I reset his voicemail password a while back.

The only thing that led me to believe he was accurately describing a PIN requirement was that in Settings - Admin - Security Settings, Security Mode was set None and grayed out. I thought maybe it was a setting that could be changed previously. 

I spoke to the IT manager for the site. He said his phone is in an office that can be locked so he wonders why he would even need such a feature. Sorry about taking everyone's time with this.