Configuring HTTPS for video unit extensions - Security Center 5.10.1.0

Additional configuration is required on the unit's web page for video units that support HTTPS connections.

1. Add a server certificate to the unit and enable HTTPS on the unit’s web page. For more information, see the manufacturer’s documentation.
2. If you are using a self-signed certificate, do the following:
   1. In Config Tool, select the Archiver managing the camera and click the Extensions tab.
   2. Select the camera extension.
   3. In Advanced security settings, do the following if required:
      • For the Archiver to accept self-signed certificates, turn on the Allow unknown certificate authority option.
      • For the Archiver to accept non-server certificates, turn on the Allow non-server certificates option.

        This tells the system to skip the validation of the X.509 extended key usage (EKU).

      • For the Archiver to accept certificates that do not have the IP address or hostname of the unit entered as the Subject name and Alternative name, set the Allow certificates with invalid subject name option to ON.
      • For the Archiver to accept expired certificates, turn on the Allow certificates with invalid date option.
   4. Click Apply.
3. If the camera was previously added to Security Center, do the following:
   1. From the Video task in Config Tool, select the unit to configure.
   2. Make sure the Use HTTPS setting is selected in the Properties tab.
   3. Configure the HTTPS Port (default is 443) and click Apply.
4. If the camera was not added to Security Center, do the following:
   1. From the Video task in Config Tool, click Add an entity ().
   2. In the Manual add dialog box, complete the necessary settings to add the camera. Make sure the Use HTTPS setting is ON.
   3. Click Add.