Hardening best practices for your Security Center system

Security Center Hardening Guide 5.9

series: Security Center 5.9
revised_modified: 2020-11-30

Introduction to Security Center hardening
About hardening
What's new in Security Center Hardening Guide 5.9
Hardening best practices for user management
Changing the default administrator password in Security Center (Basic, Advanced)
Enforcing strong passwords (Basic, Advanced)
Changing password settings for users
Setting passwords for Media Gateway RTSP streaming (Basic, Advanced)
Using a local service account for Genetec™ Server (Basic, Advanced)
Changing the default logon password for Security Center servers (Basic, Advanced)
Changing the password for Security Center servers in Genetec™ Server Admin (Basic, Advanced)
Activating auto lock on Security Desk workstations (Basic, Advanced)
About configuring Federation™ users (Basic, Advanced)
Using Windows Active Directory Integration (Advanced)
Using a third-party identity provider to authenticate a Security Center user (Advanced)
Restricting Server Admin access to local connections (Advanced)
Restricting user privileges (Advanced)
Restricting client application connections to a specific Directory (Advanced)
Hardening best practices for your Security Center system
Using the recommended security settings in InstallShield (Basic, Advanced)
Reviewing which data is collected for the Product Improvement Program (Basic, Advanced)
Using trusted certificates on Security Center servers (Advanced)
Controlling access to your resources using partitions (Advanced)
Disabling backward compatibility (Advanced)
Disabling backward compatibility for the Map Manager role (Advanced)
Deactivating unused roles (Advanced)
Using a Directory gateway for external access to Security Center (Basic, Advanced)
Running macros with limited access rights (Advanced)
Hardening best practices for the Genetec™ Update Service (GUS)
About keeping Security Center updated with Genetec™ Update Service (Basic, Advanced)
Connecting to Genetec™ Update Service with Server Admin credentials (Basic, Advanced)
Using a proxy server to connect Genetec™ Update Service to the internet (Basic, Advanced)
Hardening best practices for video management
Refusing basic authentication (Basic, Advanced)
Enabling basic authentication (Basic, Advanced)
Enabling secure communication in the Media Router (Basic, Advanced)
Upgrading video unit firmware (Basic, Advanced)
Ensuring that your cameras have strong administrator passwords (Basic, Advanced)
Connecting to cameras through HTTPS (Advanced)
Encrypting data in transit and at rest with fusion stream encryption (Advanced)
Requesting and installing encryption certificates (Advanced)
Enabling fusion stream encryption (Advanced)
Deactivating unused services on video units (Advanced)
Hardening best practices for access control
About using Global Cardholder Synchronizer (Basic, Advanced)
Enabling Secure mode on HID Units (Basic, Advanced)
Enabling Secure mode when enrolling HID Units (Basic, Advanced)
Analyzing the strength of administrator passwords on HID controllers (Basic, Advanced)
About updating the firmware on HID access units (Basic, Advanced)
Updating firmware on the Synergis™ appliance (Basic, Advanced)
Applying the recommended firmware to interface modules
Applying a cumulative security rollup to a Synergis™ appliance through Config Tool (Basic, Advanced)
Applying a cumulative security rollup to a Synergis™ appliance through Synergis™ Appliance Portal (Basic)
Changing the default administrator password for the Synergis™ appliance (Basic, Advanced)
Synchronizing the Synergis™ unit with the Access Manager
Deactivating peer-to-peer and global antipassback for the Access Manager role (Basic, Advanced)
Whitelisting your IP addresses (Basic, Advanced)
Using certificates signed by a certificate authority on the Synergis™ unit (Advanced)
Hardening best practices for logging activities
Logging Activity trails for security-related events (Basic, Advanced)
Hardening best practices for Web Server management
Changing default Web Server ports (Basic, Advanced)
Disabling unlimited session time in Security Center Web Server (Basic, Advanced)
Installing a valid certificate on the Security Center Web Server (Advanced)
Hardening best practices for Genetec™ Mobile
Changing the default Mobile Server port (Basic, Advanced)
Always use trusted connections by enforcing certificate validity (Advanced)
Verifying the list of mobile devices connected to Security Center (Advanced)
Hardening best practices for License Plate Recognition
Changing the default administrator password on a SharpV camera (Basic, Advanced)
Encrypting the connection to the SharpV web portal (Basic)
Encrypting the connection to the SharpV web portal using a self-signed certificate (Basic)
Encrypting the connection to the SharpV web portal using a certificate issued by a trusted certificate authority (CA) (Basic, Advanced)
Using the LPM protocol to connect SharpV cameras with Security Center (Basic, Advanced)
Changing the default password of a SharpX unit (Basic, Advanced)
Encrypting the connection to the SharpX web portal (Basic)
Encrypting the connection to the SharpX portal using a self-signed certificate (Basic)
Encrypting the connection to the SharpX portal using a certificate from a certificate authority (Basic, Advanced)
Restricting access to the AutoVu™ root folder (Basic, Advanced)
Using a network location for the AutoVu™ root folder (Advanced level)
Encrypting communication between Genetec Patroller™ and Security Center (Basic, Advanced)
Encrypting the Genetec Patroller™ database (Advanced level)
Restricting access to the Genetec Patroller™ workstation (Basic, Advanced)
Selecting a Genetec Patroller™ logon type (Basic, Advanced)
Disabling Simple Host functionality in Genetec Patroller™ (6.5 SR1 and later) (Basic, Advanced)
Hardening best practices for database management
About connecting to SQL Server with an account that has administrative privileges (Basic, Advanced)
About the encryption of communication between databases and Genetec™ services (Basic, Advanced)
About the encryption of database files (Advanced)
Authenticating database connections (Advanced)
Revoke permission to execute certain stored procedures (Advanced level)
Hardening best practices for Windows set up
Synchronizing all clocks within your system (Advanced)
About running client applications without administrative privileges (Basic, Advanced)
About configuring Windows securely (Basic, Advanced)
Using BitLocker full volume encryption (Advanced)
Using safe TLS versions (Advanced)

Back to home page