Securing your Kaltura Live Room

Remote Teaching

Securing your Kaltura Live Room

Securing your Kaltura Live Room

Where to host your live room
Classes/Courses hosted via BrightSpace
Classes/Courses hosted via https://video.leidenuniv.nl
How to setup the password
When should I change my password?
External Speakers
Public Events
How to deal with uninvited guests and trolls
How to create a shareable 'Launch Live Room' link

Where to host your live room
The first question you need to ask (and answer) when it comes to security is "Where should I host my live room?".

Basically the answer comes down to this:

Does the course have a BrightSpace course? If yes, host it there. Most, if not all, courses have a BrightSpace course associated with it and through that it has all the students linked. This ensures that every student of the course can use the 'Launch Live Room' link from the 'Kaltura Media Gallery'.

If the course, meeting or lecture isn't part of the standard curriculum it probably doesn't have its own BrightSpace course associated with it and should therefor be hosted on https://video.leidenuniv.nl.

Please read the sub-chapter for either BrightSpace or https://video.leidenuniv.nl (depending on your chosen platform).

Classes/Courses hosted via BrightSpace
When you host a class or course through BrightSpace a lot of the security measures have already been taken care of due to the automatic creation of the Kaltura Media Gallery through which you can host/launch your live sessions.

When you host a session through BrightSpace we ask you that you require your students (and hosts/speakers) to use the 'Launch Live Room' link, not the direct/invite link.

The 'Launch Live Room' link can be accessed (by both students as faculty) with the following steps:

- Go to brightspace.universiteitleiden.nl.
- Navigate to the course you wish to host a live session for.
- From the 'Course Tools' tab in the blue navigation bar choose 'Kaltura Media Gallery'.

- On the right hand side of the page just below the blue navigation bar you can see the 'Launch Live Room' button, please press this to host your session.

To ensure students use the 'Launch Live Room' link you do need to set a password on the invite link. This also ensures that external people cannot enter your live room session.

Please continue with the 'How to setup the password' sub-chapter.

Classes/Courses hosted via https://video.leidenuniv.nl
When hosting through the video platform there are a few more security concerns. Mostly because every channel is set to 'private' by default meaning only you can access it. This in turn means you need to invite all students to the channel as members.

This can be quite a lot of work and sadly oftentimes results in poor security because people don't want to go through the effort of inviting the students as members. We have a few solutions for this.

The faculty video coordinator can help you invite all the students in bulk. Taking away the hard work on your part as long as you can supply their ULCN's or e-mails in a list.

The faculty video coordinator can also make your channel open to all users with a ULCN login, however this is not something we would advise as this also has a lot of implications when it comes to the GDPR and copyright laws.

Please continue with the 'How to setup the password' sub-chapter.

How to setup the password

To ensure students use the 'Launch Live Room' link you we advise to set a password on the invite link (that you do not share). If a student or external person would try to use the invite link/URL they would be required to enter the password which they do not have leaving the student no other alternative than to come in through the 'Launch Live Room' link.

The invite link password is only required when you enter the live room via the direct invite link/URL. A Student, member of faculty or otherwise using the 'Launch Live Room' link is able to join the room without that password (they have already been authenticated via the ULCN login system).

To do this please follow these steps:

- Press the 'Invite' button in the top (black) bar of the live room.

- In the newly opened pop-up click on the checkbox in front of 'Require a Password'.

- In the textbox enter a password of 14 to 24 characters that is not comprised of a word you can find in the dictionary (a small sentence is good though).

- When you have less than 8 or more than 24 characters the letters will appear in red to warn you that you have used too little or too many characters (as shown in the image below).

To secure your live session properly we strongly advise you to set a 24 character password that is comprised of:
- Capital letters
- Lower case letters
- Special characters
- Numbers

Such as: 23o!hleIngl9hliNgl9hl(#h

As you can see in the image the text is shown in black and this means the password is set within its limits of 8 to 24 characters.

Your live room is now secured.

Of course a password such as the above is not something you can remember easily, for this there are tools such as Keepass which you can also use to generate similar passwords.

When should I change my password?
As soon as you have used (spread) the password you set once you should change it to another password as soon as possible (after the live session).

Again, we strongly advise against giving out the password unless absolutely necessary, for instance when you have a last minute external speaker or when the session is publicly accessible (see the last sub-chapters 'External Speakers' and 'Public events').

* even when you have advertised your live session publicly it is always better to set and spread the password than to not set one.

External Speakers
When you hold an event with an external speaker we strongly advise to arrange for a GMS (guest) account. To arrange for such an account please follow the procedure as described here:

Request a guest (GMS) account

If for whatever reason this is not possible (for instance when you have a last minute speaker) you should create a password for that event, share it to only the speaker and change it immediately after the live session ends.

Public events
When you hold a 'public' event we recommend to follow the following best practice:

- Require people to sign-up for the event (with their e-mail).
- Provide them the link to the live room as early as you wish.
- Send out the password on the day of the event (as late as possible) to prevent it from spreading farther than the invitees.

If for whatever reason you truly need a public event without passwords and signup we recommend you contact your faculty video coordinator for further help in making the best choices for your situation.

How to deal with uninvited guests and trolls
At this time there is no 'kick from the room' option available in Kaltura Live Room. If for whatever reason someone is misbehaving or an uninvited guest finds his/her way to your live room (for instance in a public event) we advise to put the uninvited or misbehaving guest in their own breakout room as a sort of improvised 'jail'.

It is possible to start a breakout room session with just one person in the breakout room whilst the plenary session continues in the main room.