Axis Communications Q6045S user manual Certificates, Go to System Options Security Ieee

Page 47

AXIS Q6045–S PTZ Dome Network Camera

System Options

2.Select an HTTPS certificate from the list of installed certificates.

3.Optionally, click Ciphers and select the encryption algorithms to use for SSL.

4.Set the HTTPS Connection Policy for the different user groups.

5.Click Save to enable the settings.

To access the Axis product via the desired protocol, enter https:// or http:// in the address field in a browser.

The HTTPS port can be changed on the System Options > Network > TCP/IP > Advanced page.

IEEE 802.1X

IEEE 802.1X is a standard for port-based Network Admission Control providing secure authentication of wired and wireless network devices. IEEE 802.1X is based on EAP (Extensible Authentication Protocol).

To access a network protected by IEEE 802.1X, devices must be authenticated. The authentication is performed by an authentication server, typically a RADIUS server, examples of which are FreeRADIUS and Microsoft Internet Authentication Service.

In Axis implementation, the Axis product and the authentication server identify themselves with digital certificates using EAP-TLS (Extensible Authentication Protocol - Transport Layer Security). The certificates are provided by a Certification Authority (CA). You need:

•a CA certificate to authenticate the authentication server.

•a CA-signed client certificate to authenticate the Axis product.

To create and install certificates, go to System Options > Security > Certificates. See Certificates, on page 47. Many CA certificates are preinstalled.

To allow the product to access a network protected by IEEE 802.1X:

1.Go to System Options > Security > IEEE 802.1X.

2.Select a CA Certificate and a Client Certificate from the lists of installed certificates.

3.Under Settings, select the EAPOL version and provide the EAP identity associated with the client certificate.

4.Check the box to enable IEEE 802.1X and click Save.

Note

For authentication to work properly, the date and time settings in the Axis product should be synchronized with an NTP server. See Date & Time, on page 48.

Certificates

Certificates are used to authenticate devices on a network. Typical applications include encrypted web browsing (HTTPS), network protection via IEEE 802.1X and secure upload of images and notification messages for example via email. Two types of certificates can be used with the Axis product:

Server/Client certificates - To authenticate the Axis product.

CA certificates - To authenticate peer certificates, for example the certificate of an authentication server in case the Axis product is connected to an IEEE 802.1X protected network.

Note

Installed certificates, except preinstalled CA certificates, will be deleted if the product is reset to factory default. Preinstalled CA certificates that have been deleted will be reinstalled.

A Server/Client certificate can be self-signed or issued by a Certificate Authority (CA). A self-signed certificate offers limited protection and can be used before a CA-issued certificate has been obtained.

47

Page 46 Page 48
Image 47
Page 46 Page 48
Contents Axis Q6045-S PTZ Dome Network Camera Intellectual Property Rights About this DocumentLegal Considerations LiabilityLearn More SupportAxis Q6045-S PTZ Dome Network Camera Table of ContentsMedia Converter Switch Connectors Performance Considerations Support Advanced Reset to Factory Default SettingsPressurize the Camera Recommended Hardware OverviewHardware Overview SD Card Slot Connectors and ButtonsLED Indicators Multi-connectorMedia Converter Switch Connectors Hardware Overview Media Converter SwitchConnector internal 2-pin I/O terminal block Network Connector Dip SwitchesDip switch position Description Media Converter Switch LED IndicatorsStart a browser Internet Explorer, Firefox, Safari Accessing the ProductAccessing the Product Access from a BrowserClick Use Https Accessing the Product Access from the InternetSet the Root Password Manual Trigger Accessing the Product Live ViewGo to Setup Events Controls on the Live ViewPTZ Controls Axis Media Control viewer toolbarAxis Q6045-S PTZ Dome Network Camera Axis Media Control AMC How to Stream H.264Media Streams Media StreamsQuickTimeTM. The following paths can be used Alternative Methods of Accessing the Video StreamAxis Q6045-S PTZ Dome Network Camera Basic Setup Setting Up the ProductSetting Up the Product Pixel Counter VideoVideo Video Stream264 Click Save to apply the new settingsStream Profiles ImageWhite Balance Camera SettingsExposure Settings Image AppearanceGo to Video Video Stream and select the Image tab Image SettingsOverlay Overlay ImageGo to Events Action Rules Using Overlay Text in an Action RulePrivacy Mask Axis Q6045-S PTZ Dome Network Camera Live View Config Live View ConfigOutput Buttons Default Viewer for BrowsersViewer Settings User Defined LinksGo to Setup Live View Config PTZ Pan Tilt Zoom Preset PositionsGo to PTZ Preset Positions PTZ Pan Tilt ZoomExclude Areas ConfigurationPTZ Pan Tilt Zoom Gatekeeper AutotrackingTo add a recorded tour Guard TourTour Recording To add a guard tourLimits Osdi ZonesAdvanced Controls Operator Same as administrator but with lower priorityControl Queue Shock Detection Set Up Motion Detection WindowsDetectors DetectorsMotion Detection Parameters Object RemovedObject Counter Enter/Exit DetectorFence Detector Application Licenses Install ApplicationApplications ApplicationsAxis Q6045-S PTZ Dome Network Camera Detectors Input SignalEvents EventsTime Setting Up an Action RuleStorage SystemRecipient RecipientsFallback Action Go to Events Action Rules and click AddGo to Events Schedules and click Add Setting Up an Email RecipientSchedules Go to Events Recipients and click AddGo to Events Recurrences and click Add Recurrences Continuous Recording Recordings Recordings Recording ListLanguages LanguagesUsers System OptionsSystem Options SecurityGo to System Options Security Ieee IeeeCertificates Network Basic TCP/IP SettingsGo to Setup System Options Security Certificates Date & TimeARP/Ping IPv4 Address ConfigurationIPv6 Address Configuration Assign IP Address Using ARP/PingDNS Configuration Advanced TCP/IP SettingsAxis Internet Dynamic DNS Service Axis Internet Dynamic DNS Service requires IPv4NAT traversal port mapping for IPv4 NTP ConfigurationHost Name Configuration Link-Local IPv4 AddressFTP QoS Quality of ServiceBonjour StorageUPnPTM RTP/H.264Go to System Options Storage Click Network Share Network ShareGo to System Options Storage and click SD Card To add a network shareSupport MaintenanceSystem Options Ports & Devices File Upload Plain ConfigLogs & Reports ScriptingSystem Options Reset to Factory Default Settings Activated, floating unconnected when Drain, 100 mA Multi-Connector CableMulti-Connector Cable Function Pin wire SpecificationsChecking the Firmware TroubleshootingTroubleshooting Emergency Recovery ProcedureProduct cannot be accessed from a browser Symptoms, Possible Causes and Remedial ActionsProblems setting the IP address When using ARP/PingBasic Product is accessible locally but not externallyProblems with streaming H.264 Media converter switch Video and image problems, generalVideo Camera Settings Storage and disk management problemsTechnical Specifications Technical SpecificationsIntegration Programming Interface Function/group Specifications System ApplicationInstallation aid MaintenanceWeight Function/group Specifications General CasingPower ConnectorsExternal Connectors Technical Specifications Media Converter Switch ConnectorsCamera Connectors Collector 100 mA Performance ConsiderationsM1.7
Top Page Image Contents