Zoom: Require That All Meetings Are Secured With One Security Option

Environment

Zoom

Issue

• Why must I choose at least one security option for every U-M Zoom meeting I host? (I.e., the "Require that all meetings are secured with one security option" setting is locked on.)
• What are the three security options from which I can choose?
• How do I set a default security option for all meetings I create?
• How do I change the security options for an existing meeting?

Resolution

All U-M Zoom accounts are required to choose at least one security option for their hosted meetings to help prevent uninvited/unauthorized participants from joining your meetings. The Zoom account setting that controls this ("Require that all meetings are secured with one security option") is mandatory and cannot be turned off.

The three security options available are as follows:

• Require authentication to join: We recommend choosing the "University of Michigan Users" authentication method when selecting this option. This will require participants to log in to their U-M Zoom account (via U-M Weblogin) before joining the meeting.
  • Individuals not eligible for a U-M Zoom account cannot join unless an authentication exception is provided, which you can grant to specific external guests,  allowing them to bypass the authentication requirement. (Refer to Article ID: 4580 for more information on authentication exceptions.)
  • Alternatively, you could select "Sign in to Zoom" as the authentication method, requiring participants to sign in to any Zoom account before joining. However, this method is less secure since anyone can create a free, personal Zoom account.
• Waiting room: This option places participants in a virtual "waiting room" until they are manually admitted to the meeting by a host, co-host, or other approved participant. Who goes to the waiting room and who can admit participants from it are controlled by the waiting room configuration settings.
  • This feature is only available for meetings, not webinars.
• Passcode: This option requires participants to either enter a passcode before joining the meeting or use a join link that includes the passcode encrypted and embedded in it.
  • A passcode alone is insufficient to protect your meeting, as passcodes and special join links are easily shared from person to person. If you use a passcode, you should also use one of the other two security settings mentioned above.

When creating new meetings, you must select at least one of the security options listed above. If none are selected by default based on your account settings, "Waiting Room" will be checked automatically. You can change this option at any time by editing the meeting details.

ITS recommends setting at least one security option as the default for all new meetings you create by updating your U-M Zoom account settings. (Otherwise, you can set them on a per-meeting basis.)

1. Go to U-M Zoom and click Sign in.
2. Click Settings from the left navigation.
3. Click the Meetings tab and scroll to the Security section.
4. Enable at least one of the following settings by toggling it on:
   • Waiting Room: Enables the waiting room feature for all future meetings you create.
     • You can adjust your waiting room configuration settings by clicking Edit Options under "Waiting Room Options." (You can also customize the title and photo/video displayed to participants by clicking Customize Waiting Room.)
     • Enabling the waiting room automatically disables the setting that allows participants to join before the host.
   • Require a passcode when scheduling new meetings: Enables the passcode requirement for all future meetings you create.
     • Enabling this will not enable passcodes for instant meetings (e.g., created in Slack using the Zoom app), your Personal Meeting ID (PMI), or participants who join via phone. To enable it for those scenarios, you need to toggle the following settings on:
       • Require a passcode for instant meetings
       • Require a passcode for Personal Meeting ID (PMI)
       • Require passcode for participants joining by phone
     • The Embed passcode in invite link for one-click join setting should already be toggled on by default, which is recommended.
   • Only authenticated meeting participants and webinar attendees can join meetings and webinars: Enables the authentication requirement for all future meetings you create.
     • This setting will apply to both meetings and webinars. You cannot enable/disable these settings separately.

Additional Information

Instructions for Specific Situations

• Security Settings for a Zoom Personal Meeting Room
• Security Settings for Zoom Meetings in Canvas
• Security Settings for Zoom Meetings linked in Calendar Invitations

Need additional information or assistance? Contact the ITS Service Center.