Specifications

16-20
Cisco Unity Express Voice-Mail and Auto-Attendant CLI Administrator Guide for 3.0 and Later Versions
OL-14010-09
Chapter 16 Backing Up and Restoring Data
Encrypting PINs in Backup Files
Encrypting PINs in Backup Files
Before release 3.0, PINs were stored as clear text in LDAP and were therefore visible in the backup file.
This is because user PINs are stored in LDAP, which is backed up in LDIF format. This feature applies
SHA-1 hash encryption to PINs before storing them in the LDAP database. As a result, when a user logs
in to voice mail, the PIN they submit is hashed and compared to the PIN attribute retrieved from LDAP
directory.
To migrate from an earlier version, you must convert from a clear PIN to a hashed PIN in the LDAP
directory. This conversion is typically done right after a system upgrade from an earlier version or after
a restore operation from an old backup. At his point, the clear PIN is removed from the database and
replaced with the encrypted PIN.
Because encryption using SHA-1 is not reversible, after the conversion is complete, you cannot disable
or turn off this feature to restore the encrypted PIN to its clear form.
Note This feature does not require any configuration using the GUI or CLI.
Configuring Scheduled Backup Jobs
Beginning in release 7.1, you can configure one-time or recurring backup jobs.
For recurring backup jobs, you can configure the jobs to repeat:
• Every N days at a specific time
• Every N weeks on a specific day and time
• Every N months on a specific day of the month and time
• Every N years on a specific month
You can configure up to five repetitive scheduled backup jobs and five one-time scheduled backup jobs.
Whenever a backup job (or any scheduled activity) is started and in progress, any other activities that are
scheduled to start at this time, are put in queue to wait for the first activity to finish. The maximum size
of the queue is nine activities.
You cannot delete individual instances of a recurring scheduled backup schedule; you can only delete
the entire series of backup jobs. However, you can enable forever a given scheduled action by
configuring start and end dates for the action to specify when the action is active. You can also suspend
a scheduled action indefinitely by not specifying an expiration date for the action.
Step 4
backup security enforced
Example:
se-10-0-0-0(config)# backup security enforced
Specifies that only protected and untampered backup
files are restored.
Step 5
end
Example:
se-10-0-0-0(config)# end
Returns to privileged EXEC mode.
Command or Action Purpose