DX8100 Platform Security Information
The DX8000 Series hybrid video recorder (HVR) is equipped with an extensive set of security measures to provide the user with secure, uninterrupted service.
NOTES:
•While great care has been taken in the design and development of the DX8100 to ensure a secure HVR platform, it is not feasible to protect a system from all internal and external security risks if it is connected to an unsecured network. In addition to the robust security features built into the DX8100, you should consult with your network administrator, information technology department, and facilities manager to ensure that all possible measures are being taken to ensure the safety and security of the DX8100 and its data.
•For information about upgrading or reinstalling DX8100 software, refer to the DX8100 Upgrade and Recovery manual.
The following sections describe the security features of the DX8100 in detail. These sections are intended for system administrators who are responsible for the maintenance and security of the DX8100.
PHYSICAL SECURITY
Like any other video recording device, including VCRs, the security of the DX8100 is largely dependent on the physical security of the unit itself. When an intruder has access to the hardware, it will be possible to remove components and retrieve recorded data. Units should therefore be installed in a location that is physically secured.
Because the dimensions and underlying technologies of the DX8100 are similar to those of a modern personal computer, it is possible to rack mount units and access the mouse and keyboard inputs using commercially available keyboard video mouse (KVM) switches. This may bring the control of the units outside of the secured area. One area where this could cause a problem involves access to the system’s basic input/output system (BIOS). Pelco recommends that the unit be given a BIOS supervisor password upon completion of installation. A unique BIOS supervisor password will help prevent remote operators from changing boot parameters that could allow the unit to be booted using unsecured sources.
The DX8100 is engineered to reboot automatically in the event of a system problem. The capability of recovering from certain errors without operator intervention minimizes the potential amount of time an HVR will be offline. To retain this capability, it is important that a password be set for BIOS Supervisor account only and not for the BIOS User account. Setting a password for the BIOS User account would force operators to
WARNING: Always scan removable media, such as
5 |