Axis Communications M1114E user manual Certificates, Go to System Options Security Ieee

Page 39

AXIS M1114–E

System Options

2.Select an HTTPS certificate from the list of installed certificates.

3.Optionally, click Ciphers and select the encryption algorithms to use for SSL.

4.Set the HTTPS Connection Policy for the different user groups.

5.Click Save to enable the settings.

To access the Axis product via the desired protocol, enter https:// or http:// in the address field in a browser.

The HTTPS port can be changed on the System Options > Network > TCP/IP > Advanced page.

IEEE 802.1X

IEEE 802.1X is a standard for port-based Network Admission Control providing secure authentication of wired and wireless network devices. IEEE 802.1X is based on EAP (Extensible Authentication Protocol).

To access a network protected by IEEE 802.1X, devices must be authenticated. The authentication is performed by an authentication server, typically a RADIUS server, examples of which are FreeRADIUS and Microsoft Internet Authentication Service.

In Axis implementation, the Axis product and the authentication server identify themselves with digital certificates using EAP-TLS (Extensible Authentication Protocol - Transport Layer Security). The certificates are provided by a Certification Authority (CA). You need:

a CA certificate to authenticate the authentication server.

a CA-signed client certificate to authenticate the Axis product.

To create and install certificates, go to System Options > Security > Certificates . See Certificates on page 39. Many CA certificates are preinstalled.

To allow the product to access a network protected by IEEE 802.1X:

1.Go to System Options > Security > IEEE 802.1X.

2.Select a CA Certificate and a Client Certificate from the lists of installed certificates.

3.Under Settings, select the EAPOL version and provide the EAP identity associated with the client certificate.

4.Check the box to enable IEEE 802.1X and click Save.

Note

For authentication to work properly, the date and time settings in the Axis product should be synchronized with an NTP server. See Date & Time on page 40.

Certificates

Certificates are used to authenticate devices on a network. Typical applications include encrypted web browsing (HTTPS), network protection via IEEE 802.1X and secure upload of images and notification messages for example via email. Two types of certificates can be used with the Axis product:

Server/Client certificates - To authenticate the Axis product.

CA certificates - To authenticate peer certificates, for example the certificate of an authentication server in case the Axis product is connected to an IEEE 802.1X protected network.

Note

Installed certificates, except preinstalled CA certificates, will be deleted if the product is reset to factory default. Preinstalled CA certificates that have been deleted will be reinstalled.

A Server/Client certificate can be self-signed or issued by a Certificate Authority (CA). A self-signed certificate offers limited protection and can be used before a CA-issued certificate has been obtained.

39

Image 39
Contents Axis M1114-E Intellectual Property Rights About this DocumentLegal Considerations LiabilityLearn More SupportAxis M1114-E Table of ContentsPerformance Considerations Control Button Connectors and ButtonsNetwork Connector Hardware OverviewNetwork LED Indication LED IndicatorsPower LED Indication Status LED IndicationSet the Root Password Access the ProductAccess from a Browser Access from the InternetSet Power Line Frequency Live ViewClick Create self-signed certificate Manual Trigger Go to Setup EventsControls on the Live View Axis Media Control viewer toolbarPTZ Controls How to Stream H.264 Media StreamsAxis Media Control AMC QuickTimeTM. The following paths can be used Alternative Methods of Accessing the Video StreamAxis M1114-E Back Focus Adjustment Set Up the ProductBasic Setup Focus AdjustmentImage VideoVideo Stream Pixel CounterClick Save to apply the new settings Stream Profiles264 Image Appearance Camera SettingsExposure Settings View AreaGo to Video Overlay Image OverlayOverlay Image Go to Video Video Stream and select the Image tabGo to Events Action Rules Use Overlay Text in an Action RulePrivacy Mask Browser Viewer Description Configure the Live ViewDefault Viewer for Browsers Viewer SettingsUser Defined Links Preset Positions PTZ Pan Tilt ZoomGuard Tour Controls Operator Same as administrator but with lower priorityAdvanced Control QueueGo to Detectors Camera Tampering DetectorsCamera Tampering Motion DetectionMotion Detection Parameters Set Up Motion Detection WindowsAxis M1114-E Application Licenses Install ApplicationGo to Setup Applications ApplicationsAxis M1114-E Go to Events Action Rules and click Add Set Up Action RulesEvents Convert Event Types to Action RulesActions TriggersRecipient Use with action Add RecipientsRecipient Types Go to Events Recipients and click AddGo to Events Schedules and click Add Set Up RecurrencesSet Up Email Recipients Create SchedulesAxis M1114-E Go to Recordings List RecordingsRecording List Continuous RecordingLanguages IP Address Filter System OptionsSecurity UsersIeee CertificatesGo to System Options Security Ieee Network Basic TCP/IP SettingsGo to Setup System Options Security Certificates Date & TimeARP/Ping IPv4 Address ConfigurationIPv6 Address Configuration Axis Internet Dynamic DNS ServiceHost Name Configuration Advanced TCP/IP SettingsDNS Configuration NTP ConfigurationFTP NAT traversal port mapping for IPv4RTP/H.264 QoS Quality of ServiceUPnPTM can be disabled under System Options Network UPnPTM UPnPTMNetwork Share MaintenanceStorage BonjourLogs & Reports SupportSupport Overview System OverviewFile Upload Reset to Factory Default SettingsPlain Config ScriptingCheck the Firmware TroubleshootingUpgrade the Firmware Emergency Recovery ProcedureProduct is accessible locally but not externally Symptoms, Possible Causes and Remedial ActionsProblems setting the IP address Product cannot be accessed from a browserVideo Camera Settings Problems with streaming H.264Status and Network indicator LEDs are flashing red rapidly Video and image problems, generalReformat the SD card and then click Mount Storage and disk management problemsStorage disruption Re-mount the storage deviceTechnical Specifications Power Function/group Specifications System ApplicationInstallation Maintenance General CasingPerformance Considerations M2.5