Platform enhancements in Security Center 5.8 GA - Security Center 5.8 GA

Genetec Mission Control™ compatibility notice

Genetec Mission Control™ is currently not compatible with Security Center 5.8. Genetec Mission Control™ users should continue using Security Center 5.7.

General enhancements

Dashboards

Dashboards are now available in Security Desk. A dashboard is a customizable task that tracks the key indicators and other information that you need to achieve a comprehensive view of what matters to you. To build a view tailored to your day-to-day, you can pin Security Center tiles, reports, and charts to a blank canvas.

Watch this video to learn more. Click the Captions icon (CC) to turn on video captions in one of the available languages. If using Internet Explorer, the video might not display. To fix this, open the Compatibility View Settings and clear Display intranet sites in Compatibility View.

For more information, see About dashboards.

Privilege troubleshooter

A new Privilege troubleshooter is available in Config Tool. Strengthen your security protocols with increased visibility into your users’ privileges. The Privilege Troubleshooter lets you audit user rights on each entity in just a few clicks, so you can ensure only the right individuals can access, operate, or modify its settings.

With this tool, you can discover:

• Who has permission to work with a selected entity
• What privileges are granted to selected users or groups
• Who has been granted a privilege, has access to a specific entity, or both

For more information, see About the Privilege troubleshooter.

Separate privileges for modifying and deleting incident reports

From now on, users with the Modify reported incidents privilege can no longer delete incidents. To delete incidents, the user must have the Delete reported incidents privilege.

NOTE: If you are upgrading from a previous version, the new privilege Delete reported incidents is not automatically granted to users who had the Modify reported incidents privilege.

Privilege required for Spy mode

Users now require the Spy mode privilege to connect to remote Security Desk workstations in Spy mode.

For more information, see Connecting to remote Security Desk applications.

Enhanced audit trails

Additional configuration and property changes are now logged by the system. The Audit trails task now logs the following:

• Configuration changes to role databases
• Property changes to the Intrusion Manager role and to video-related roles

New task commands

You can now open a task in the background by pressing Ctrl and clicking the task, or duplicate an opened task by right-clicking the task from the taskbar, and then clicking Duplicate task in the contextual menu.

Entity count in the Relationships tree

On the Identity page of an entity, the number of each associated entity is now displayed in the Relationships tree when you expand the entity.

Role state displayed in area view

Deactivated roles are now displayed in grey instead of red in the area view.

Security enhancements

Security Score widget

You can now track your system security and identify potential vulnerabilities in near real time with the Security Score dashboard widget. The Security Score measures compliance to Security Center hardening best practices, such as password strength, use of certificates and encryption, and more.

The Security Score widget is available with Security Desk dashboards. For more information, see About dashboards.

Database security

The communication between roles and their database servers is now secured by default. Two options are available:

Encrypt connections

(Default) Uses Transport Layer Security (TLS) protocol for all transactions between the role and the database server. This option prevents eavesdropping and requires no setup on your part.

Validate certificate

Authenticates the database server before opening a connection. This is the most secure communication method and prevents man-in-the-middle attacks. The Encrypt connections option must first be enabled.

NOTE: You must deploy a valid identity certificate on the database server. A valid certificate is one that is signed by a certificate authority (CA) that is trusted by all servers hosting the role and that is not expired.

Encryption of video in transit by default

You now have the option to encrypt your video only when it is streamed from the Archiver. The video archive is not encrypted. This option does not require any certificate to be installed, and is the default setting for all Archiver roles created in 5.8 GA and later. All users who have the right to access the camera can view the encrypted video.

Limitation: Multicast from the unit is not supported. This option is incompatible with Security Center 5.7 and earlier.

For more information, see Configuring default camera settings.

Federation™ enhancements

Remote configuration task

You can now configure federated Security Center entities from the Config Tool connected to the Federation™ host, using the Remote configuration task.

NOTE: Multi-level federations are not supported in this release.

For more information, see Configuring federated entities.

When federated entities are modified from the Federation™ host, users at the federated site can see who made the changes by running the Audit trails report. This ensures the total transparency of the configuration process and improves your system security.

Monitoring enterprise data from a central system

Previously, you could only view federated camera settings through the Camera configuration report. Now, provided that the Federation™ users have all required privileges, you can view all federated unit settings through the Hardware inventory report.

For more information, see Viewing unit properties.

Limitation: The Password and the Proposed firmware version report columns are not available for federated units, nor are the action commands, such as Reboot () and Upgrade firmware (). To see those settings and use those commands, you must run the Hardware inventory task from within the Remote configuration task.

Monitoring enterprise activities from a central system

The Forward Directory reports option has been added to the Security Center Federation™ role. When this option is turned on (default=OFF), user activities (viewing cameras, activating the PTZ, and so on) and configuration changes performed at the remote site can be viewed from the Federation™ host through the Activity trails and Audit trails reports, as long as the Federation™ user has the privileges and access rights to view them.

Yellow arrow removed from federated entities

In Security Desk, federated entities no longer have a yellow arrow superimposed on their entity icons by default. For example, a federated alarm in Config Tool is indicated by a yellow arrow (), but the same entity in Security Desk does not have the arrow ().

To display the arrows on federated entity icons in Security Desk, you must modify the App.SecurityDesk.config file found in C:\Program Files (x86)\Genetec Security Center 5.8\ConfigurationFiles. In the Presentation section, change the value of DisplayFederationArrow to "true" (DisplayFederationArrow="true").

Map enhancements

End of support for legacy Plan Manager 10.x plugin

Starting with Security Center 5.8 GA, the legacy Plan Manager 10.x plugin is no longer tested nor supported. Only the native Plan Manager is supported in Security Center 5.8.

If you want to use the legacy Plan Manager 10.x plugin with Security Center 5.8, your Security Center license must include the GSC-PM-Legacy part.

Configurable zoom level on custom Tile Map Service maps

You can now specify a maximum zoom level between 1 - 25 (default = 17) for custom Tile Map Service (TMS) map providers.

For more information, see Connecting Map Manager to a TMS map provider.

AutoCAD format support

You can now create maps from DXF and DWG image files. CAD layers are imported as flat images.

Web Map Service protocol support

You can now use Web Map Service (WMS) servers as online map providers. When connecting the Map Manager to a WMS server, you can enable or disable layers to control what is shown on the map.

Map Manager supports the WMS protocol version 1.3.0 and 1.1.1.

For more information, see Connecting Map Manager to a WMS map provider.

Configurable FOV colors

You can now specify the color of camera FOV indicators from the Field of view widget in the Map designer task.

Customizing door state display

You can now set different icons for Door open and Door closed events from the Identity widget in the Map designer task.

Show mobile users on maps

With the new Mobile Server role and the new app, you can now show the location of mobile users on georeferenced maps in Security Desk. Mobile users are displayed as bubbles. Clicking on a user shows basic information such as the Security Center username, photo, location, and last update time. From the map, you can send messages to mobile users and share entities.

For more information, see Showing mobile users on maps.

Limitation:

• The street address of the mobile user is only available if the Map Manager role has a valid Google license key.
• Some shareable entities cannot be displayed in .

Customizing map behavior in Security Desk

You can now customize the following map behaviors from the Options dialog box in Security Desk:

• Panel position of alarms, events, and map layers
• Map item behavior on single-click, double-click, and lasso
• Display of alarms from linked maps

For more information, see Customizing map behavior in Security Desk.

Displaying alarms on linked maps

You can now see the number of active alarms on linked maps on the Maps task toolbar, floor controls, and map links, by enabling the Display alarms from linked maps option in Security Desk.

Dynamic Keyhole Markup Language (KML) support

Dynamic KML objects are now supported on maps in Security Center. These objects represent fluid information, such as weather conditions and traffic flow, that is refreshed automatically at the interval specified in the KML.

Floor management

You can now designate two or more maps as floors of the same building. Each floor is automatically linked to all other connected floors. You can quickly navigate between floor maps from the floor controls, by pressing the button for the floor you want to see.

Floor controls

If an area is included in multiple buildings, like a shared parking lot, then the floor controls can be used to navigate between buildings.

For more information, see Configuring maps as floors of a building.

Lock map display

You can now lock maps to their default home position from the Map designer task in Config Tool. Locking a map prevents users from changing the map position by panning, zooming or using presets.

New privilege for Switch to map mode

The ability to switch between tile mode and map mode is now controlled by the Switch to map mode privilege.

Map mode is a Security Desk canvas operating mode that replaces tiles and controls with a geographical map showing all active, georeferenced events in your system. Switching to Map mode is a feature of AutoVu™ and Genetec Mission Control™, and requires a license for one of these products.

New Mobile Server and app

For more information, see About.

New Mobile Server role

Mobile Server now runs as a role. It is automatically created after installation if your license supports Mobile. The Mobile Server role supports secure communications and can be expanded with new features without upgrading your system.

End of support for legacy Mobile Server 4.x

The legacy Mobile Server 4.x is installed as a separate application. Legacy Mobile Server 4.x is no longer supported with Security Center 5.8 GA, but it is still supported with older versions of Security Center.

Enhanced collaboration between your HQ personnel and your agents in the field

You can now show the location of your users on georeferenced maps in Security Desk. Your operators can also exchange text messages and send and receive video from users in the field.

New app

The new app has a map-based interface with one-tap access to any of your security devices, such as cameras, doors. The app replaces the following mobile apps:

• Genetec™ Security Center
• Security Center Legacy
• Genetec™ Threat Level

For more information, visit our website.

Intrusion detection enhancements

Honeywell intrusion panel extension

A new Honeywell intrusion panel extension is available as of Security Center 5.7 SR2. By Security Center 5.9, the legacy Honeywell Galaxy Dimension control panel integration will reach end-of-life and no longer be supported. Customers using this integration should migrate to the new Honeywell intrusion panel extension before upgrading to Security Center 5.9.

Changing bypass states of inputs

When inputs associated to an intrusion detection area are bypassed or in an alarm state, you can now view them from a widget on a map or in a monitoring tile. You can change the bypass state of the input by right-clicking the input from the list.

New input type definitions

You can now specify the intrusion input type from the Peripherals page of the intrusion detection unit. The types of inputs are listed on the Input definitions page of the Intrusion Manager role.

For more information, see Intrusion Manager configuration tabs.

New report pane column in the Intrusion detection area activities task

In the Intrusion detection area activities report, you can now display the picture of the cardholder that triggered an event, and filter the results by input type.

Health monitoring enhancements

New health monitoring events

The following health events are now available in the Health history report:

• Unit time in sync with time server
• Unit time out of sync with time server
• Transmission lost
• Transmission recovered

You can configure whether or not to monitor them on the Properties page of the Health Monitor role.

Health event monitoring

You can now trigger actions with health events, using event-to-actions.

Genetec™ Update Service enhancements

Updated notifications

Genetec™ Update Service notifications in the Config Tool notification tray are now more detailed, and you can view the update details and configure Genetec™ Update Service from the System task by clicking General settings > Updates.