Axis Communications AXIS Q1614 user manual Certificates, Go to System Options Security Ieee

Page 48

AXIS Q1614 Network Camera

System Options

2.Select an HTTPS certificate from the list of installed certificates.

3.Optionally, click Ciphers and select the encryption algorithms to use for SSL.

4.Set the HTTPS Connection Policy for the different user groups.

5.Click Save to enable the settings.

To access the Axis product via the desired protocol, enter https:// or http:// in the address field in a browser.

The HTTPS port can be changed on the System Options > Network > TCP/IP > Advanced page.

IEEE 802.1X

IEEE 802.1X is a standard for port-based Network Admission Control providing secure authentication of wired and wireless network devices. IEEE 802.1X is based on EAP (Extensible Authentication Protocol).

To access a network protected by IEEE 802.1X, devices must be authenticated. The authentication is performed by an authentication server, typically a RADIUS server, examples of which are FreeRADIUS and Microsoft Internet Authentication Service.

In Axis implementation, the Axis product and the authentication server identify themselves with digital certificates using EAP-TLS (Extensible Authentication Protocol - Transport Layer Security). The certificates are provided by a Certification Authority (CA). You need:

a CA certificate to authenticate the authentication server.

a CA-signed client certificate to authenticate the Axis product.

To create and install certificates, go to System Options > Security > Certificates . See Certificates on page 48. Many CA certificates are preinstalled.

To allow the product to access a network protected by IEEE 802.1X:

1.Go to System Options > Security > IEEE 802.1X.

2.Select a CA Certificate and a Client Certificate from the lists of installed certificates.

3.Under Settings, select the EAPOL version and provide the EAP identity associated with the client certificate.

4.Check the box to enable IEEE 802.1X and click Save.

Note

For authentication to work properly, the date and time settings in the Axis product should be synchronized with an NTP server. See Date & Time on page 49.

Certificates

Certificates are used to authenticate devices on a network. Typical applications include encrypted web browsing (HTTPS), network protection via IEEE 802.1X and secure upload of images and notification messages for example via email. Two types of certificates can be used with the Axis product:

Server/Client certificates - To authenticate the Axis product.

CA certificates - To authenticate peer certificates, for example the certificate of an authentication server in case the Axis product is connected to an IEEE 802.1X protected network.

Note

Installed certificates, except preinstalled CA certificates, will be deleted if the product is reset to factory default. Preinstalled CA certificates that have been deleted will be reinstalled.

A Server/Client certificate can be self-signed or issued by a Certificate Authority (CA). A self-signed certificate offers limited protection and can be used before a CA-issued certificate has been obtained.

48

Image 48
Contents Axis Q1614 Network Camera About this Document Legal ConsiderationsLiability Intellectual Property RightsSupport Learn MoreTable of Contents Axis Q1614 Network CameraTechnical Specifications Storage Ports Maintenance Support AdvancedConnectors Connectors and Buttons For technical specifications, seeHardware Overview Network Connector ConnectorPower Connector Audio ConnectorLED Indicators Status LED Behavior for Focus AssistantFunction Button Color IndicationBuzzer Signal for Focus Assistant Replace the LensBuzzer LensAxis Q1614 Network Camera Access the Product Access from a BrowserAccess from the Internet Set the Root PasswordPTZ Mode Configure Capture ModeSet Power Line Frequency Live ViewGo to Setup Events Controls on the Live ViewManual Trigger To show the manual trigger buttons in the Live ViewAxis Media Control viewer toolbar PTZ ControlsAMC Audio Controls Axis Q1614 Network Camera How to Stream H.264 Media StreamsAxis Media Control AMC Alternative Methods of Accessing the Video Stream QuickTimeTM. The following paths can be usedAccess Audio Streams Java applet supports simplex audio with G.711 encodingSet Up the Product Basic SetupFocus Adjustment Video and Audio Video StreamPixel Counter ImageClick Save to apply the new settings Stream Profiles264 Camera Settings Capture ModeGo to Setup Video & Audio Camera Settings Lightfinder Mode Exposure SettingsImage Appearance White BalanceIris configuration Iris adjustmentSet Shutter to Day/NightTo configure the view area View AreaOverlay Go to Video & Audio Video Stream and select the Image tabOverlay Image Use Overlay Text in an Action RuleGo to Video & Audio Overlay Image Privacy Mask FocusGo to Events Action Rules BasicAudio Settings Audio ModesAudio Input Audio Clips Audio OutputConfigure the Live View Default Viewer for BrowsersViewer Settings Browser Viewer DescriptionGo to Setup Live View Config User Defined LinksOutput Buttons For more information about I/O ports, see I/O Ports onPreset Positions Go to PTZ Preset PositionsPTZ Pan Tilt Zoom Guard TourInstall PTZ Driver Device SettingsAdvanced Control QueueOperator Same as administrator but with lower priority Detectors Camera TamperingMotion Detection Shock DetectionSet Up Motion Detection Windows Motion Detection ParametersGo to Detectors Motion Detection Parameter Object Size History Sensitivity DescriptionAudio Detection Install Application Go to Setup ApplicationsApplications Application LicensesAxis Q1614 Network Camera Set Up Action Rules EventsTriggers Go to Events Action Rules and click AddInput Signal HardwareStorage SystemSet Up Email Recipients Add RecipientsActions PTZ ControlSet Up Recurrences Create SchedulesTo create a new schedule Go to Events Schedules and click AddRecordings Find RecordingsPlay Recording Go to Recordings ListExport Video Clip Continuous RecordingTo play a recording, follow these steps Go to Recordings ContinuousLanguages System Options SecurityUsers IP Address FilterIeee CertificatesGo to System Options Security Ieee To install a self-signed certificate Go to Setup System Options Security CertificatesClick Install certificate and upload the certificate Date & TimeBasic TCP/IP Settings NetworkAdvanced TCP/IP Settings Axis Internet Dynamic DNS ServiceAxis Internet Dynamic DNS Service requires IPv4 DNS ConfigurationNTP Configuration Host Name ConfigurationLink-Local IPv4 Address NAT traversal port mapping for IPv4QoS Quality of Service FTPUPnPTM can be disabled under System Options Network UPnPTM UPnPTMRTP/H.264 Storage BonjourSD Card Mount and Unmount SD CardUnder General Settings, select Autoformat to Network ShareTo add a network share Go to System Options Storage Click Network ShareMaintenance PortsSupport Support OverviewSystem Overview Logs & ReportsReset to Factory Default Settings Plain ConfigFile Upload Troubleshooting Upgrade the FirmwareEmergency Recovery Procedure Check the FirmwareSymptoms, Possible Causes and Remedial Actions Problems setting the IP addressProduct cannot be accessed from a browser Product is accessible locally but not externallyProblems with streaming H.264 Status and Network indicator LEDs are flashing red rapidlyVideo and image problems, general Setup Video & Audio Camera SettingsSettings Storage and disk management problemsNo audio Poor audio qualityTechnical Specifications Function/group Specifications Audio Specification Network SecurityAudio input Audio outputFunction/group Specifications Video buffer PowerConnectors WeightConnectors Function/group Specifications WarrantyConnector Function Pin SpecificationsRS485/422 Connector Performance ConsiderationsOutput Function PinAxis Q1614 Network Camera M4.4