User Manual

Table Of Contents

AXISP3904-RNetworkCamera

Aboutsystemoptions

HTTPS

HTTPS(HyperTextTransferProtocoloverSecureSocketLayer,orHTTPoverSSL)isawebprotocolprovidingencryptedbrowsing.

HTTPScanalsobeusedbyusersandclientstoverifythatthecorrectdeviceisbeingaccessed.Thesecuritylevelprovidedby

HTTPSisconsideredadequateformostcommercialexchanges.

TheAxisproductcanbeconguredtorequireHTTPSwhenusersfromdifferentusergroups(administrator,operator,viewer)login.

TouseHTTPS,anHTTPScerticatemustrstbeinstalled.GotoSystemOptions>Security>Certicatestoinstallandmanage

certicates.SeeAboutcerticatesonpage41.

ToenableHTTPSontheAxisproduct:

1.GotoSystemOptions>Security>HTTPS

2.SelectanHTTPScerticatefromthelistofinstalledcerticates.

3.Optionally,clickCiphersandselecttheencryptionalgorithmstouseforSSL.

4.SettheHTTPSConnectionPolicyforthedifferentusergroups.

5.ClickSavetoenablethesettings.

ToaccesstheAxisproductviathedesiredprotocol,intheaddresseldinabrowser,enterhttps://fortheHTTPSprotocol

andhttp://fortheHTTPprotocol.

TheHTTPSportcanbechangedontheSystemOptions>Network>TCP/IP>Advancedpage.

Aboutcerticates

Certicatesareusedtoauthenticatedevicesonanetwork.Typicalapplicationsincludeencryptedwebbrowsing(HTTPS)andsecure

uploadofimagesandnoticationmessagesforexampleviaemail.TwotypesofcerticatescanbeusedwiththeAxisproduct:

Server/Clientcerticates-ToauthenticatetheAxisproduct.AServer/Clientcerticatecanbeself-signedorissuedbyaCerticate

Authority(CA).Aself-signedcerticateofferslimitedprotectionandcanbeusedbeforeaCA-issuedcerticatehasbeenobtained.

CAcerticates-Toauthenticatepeercerticates,forexamplethecerticateofanauthenticationserver.TheAxisproductis

shippedwithseveralpreinstalledCAcerticates.

Note

•Iftheproductisresettofactorydefault,allcerticates,exceptpreinstalledCAcerticates,willbedeleted.

•Iftheproductisresettofactorydefault,allpreinstalledCAcerticatesthathavebeendeletedwillbereinstalled.

Howtocreateaself-signedcerticate

1.GotoSetup>SystemOptions>Security>Certicates.

2.ClickCreateself-signedcerticateandprovidetherequestedinformation.

HowtocreateandinstallaCA-signedcerticate

1.Createaself-signedcerticate,seeHowtocreateaself-signedcerticateonpage41.

2.GotoSetup>SystemOptions>Security>Certicates.

3.ClickCreatecerticatesigningrequestandprovidetherequestedinformation.

4.CopythePEM-formattedrequestandsendtotheCAofyourchoice.

5.Whenthesignedcerticateisreturned,clickInstallcerticateanduploadthecerticate.