Web Client Server

Security Center Hardening Guide 5.12

Product: Security Center
Content type: Guides > Administrator guides
Version: 5.12
ft:locale: en-US
Last updated: 2024-12-17

Introduction to the Security Center Hardening Guide
About hardening
What's new in Security Center Hardening Guide 5.12
User Management
Changing the default Admin password (Basic)
Enforcing a strong password policy (Advanced)
Best practices for a strong password policy
Changing password settings for users
Using a local service account for Genetec Server (Basic)
Changing the logon password for Security Center servers (Basic)
Changing the password of Security Center servers in Genetec Server Admin (Basic)
Activating auto lock or auto disconnect on desktop clients (Basic)
Restricting Server Admin access to local connections (Advanced)
Using Windows Active Directory integration (Advanced)
Using a third-party identity provider to authenticate Security Center users (Advanced)
Restricting user privileges (Advanced)
Restricting client application connections to a specific Directory (Advanced)
Deactivating the default Admin user profile (Basic)
Setting passwords for Media Gateway RTSP streaming (Basic)
Restricting the privileges of Federation users (Basic)
Deactivating all local users (Advanced)
System
Using trusted certificates on Security Center servers (Advanced)
Disabling backward compatibility (Advanced)
Running macros with limited access rights (Advanced)
Disabling backward compatibility for the Map Manager role (Advanced)
Deactivating unused roles (Basic)
Using the recommended security settings in InstallShield (Basic)
Reviewing which data is collected for the Product Improvement Program (Basic)
Controlling access to your resources using partitions (Advanced)
Using a Directory gateway for external access to Security Center (Basic)
Genetec Update Service (GUS)
Keeping Security Center up to date with Genetec Update Service (Basic)
Connecting to Genetec Update Service with Server Admin credentials (Basic)
Using a proxy server to connect Genetec Update Service to the internet (Basic)
Video
Refusing basic authentication (Basic)
Enabling basic authentication (Basic)
Enabling secure communication in the Media Router (Basic)
Upgrading video unit firmware (Basic)
Setting strong admin passwords for cameras (Basic)
Rotating your camera passwords periodically (Advanced)
Connecting to cameras through HTTPS (Advanced)
Encrypting data in transit and at rest with fusion stream encryption (Advanced)
Requesting and installing encryption certificates (Advanced)
Enabling fusion stream encryption (Advanced)
Deactivating unused services on video units (Advanced)
Enabling digital signature to ensure the integrity of video files (Basic)
Setting up a cryptographic key for digital signatures
Access Control
Using dedicated users with restricted privileges for Global Cardholder Synchronizer roles (Basic)
Enabling Secure mode on HID units (Basic)
Using strong passwords on access control units (Basic)
Safeguarding the Synergis Softwire diagnostic service account (Basic)
Applying critical firmware updates to access control devices (Basic)
Applying the recommended platform updates to access control units (Basic)
Using trusted certificates on Synergis units (Advanced)
Disabling the ability to drive output relays from the Synergis unit web interface (Basic)
Using secure reader connections (Basic)
Disabling peer-to-peer and global antipassback for Access Manager roles (Basic)
Rotating Synergis unit passwords periodically (Advanced)
Logging
Logging activity trails for security-related events (Basic)
Web Client Server
Disabling unlimited session time on the Web Client Server role (Basic)
Installing a valid certificate on the Web Client Server role (Advanced)
Changing default Web Client Server ports (Basic)
Web App Server
Changing the default Web App Server port (Basic)
Disabling support for unused features in the Web App Server (Basic)
Changing the certificate on the Web App Server role (Advanced)
Genetec Mobile
Changing the default Mobile Server port (Basic)
Always use trusted connections by enforcing certificate validity (Advanced)
Removing lost or stolen mobile devices from Security Center (Advanced)
License Plate Recognition
Changing the default password for SharpV units (Basic)
Encrypting the connection to the SharpV web portal (Basic)
Encrypting the connection to the SharpV web portal using a self-signed certificate (Basic)
Encrypting the connection to the SharpV web portal using a certificate issued by a trusted certificate authority (CA) (Basic)
Using the LPM protocol to connect SharpV units with Security Center (Basic)
Changing the default password for SharpZ3 units (Basic)
Encrypting the connection to the SharpZ3 web portal (Basic)
Encrypting the connection to the SharpZ3 web portal using a self-signed certificate (Basic)
Encrypting the connection to the SharpZ3 web portal using a certificate issued by a trusted certificate authority (CA) (Basic)
Using the LPM protocol to connect SharpZ3 units with Security Center (Basic)
Changing the default password for SharpX units (Basic)
Encrypting the connection to the SharpX web portal (Basic)
Encrypting the connection to the SharpX portal using a self-signed certificate (Basic)
Encrypting the connection to the SharpX portal using a certificate from a certificate authority (Basic)
Encrypting communication between Patroller and Security Center (Basic)
Encrypting the Patroller database (Advanced)
Selecting a Patroller logon type (Basic)
Disabling SimpleHost functionality in Patroller (Basic)
Restricting access to the AutoVu root folder (Basic)
Using a network location for the AutoVu root folder (Advanced)
Restricting access to the Patroller workstation (Basic)
Database
Avoiding connections to SQL Server with an account that has administrative privileges (Basic)
Encrypting communication between database servers and Genetec services (Basic)
Encrypting database data files (Advanced)
Authenticating database connections (Advanced)
Revoking execution permissions for specific stored procedures (Advanced)
Windows
Applying the latest security updates on the OS running Security Center (Basic)
Synchronizing all clocks within your system (Advanced)
Running client applications without administrative privileges (Basic)
Applying the latest Windows security baselines (Basic)
Using safe TLS versions (Advanced)
Using BitLocker full volume encryption (Advanced)

Back to home page