[KBA-79030] Axis cameras stop recording after upgrading to Security Center 5.8 or 5.9 when using HTTPS and video encryption - Security Center 5.8 - 5.9

series
Security Center 5.8 - 5.9
revised_modified
2020-04-02

[KBA-79030] Axis cameras stop recording after upgrading to Security Center 5.8 or 5.9 when using HTTPS and video encryption

This article explains why Axis cameras display a Requesting live stream error after upgrading to Security Center 5.8 or 5.9, when you are using HTTPS and video encryption in specific system environments.

Symptoms

After upgrading to Security Center 5.8 or 5.9, Axis cameras do not stream video and display a Requesting live stream error if you are using HTTPS in the following system environments:
  • The cameras were added using HTTPS.
  • The Archiver role encryption settings or the custom encryption settings of the camera are set to In transit and at rest.
  • The Certificate Id RTSPS setting on the unit web page is different from certificate used by the camera for HTTPS.

Cause

An external limitation with Axis units where the certificate used for RTSPS is not set correctly when setting the HTTPS certificate.

Fix

To fix this issue, do the following for each Axis camera:
NOTE: The Axis web page interface might be slightly different, depending on the firmware version and camera model.
  1. Open the unit web page and click Settings.
  2. Click the System tab and click Plain config > Network.
  3. In the RTSPS section, select the Allow client transport settings and Enabled options.
  4. In the Certificate id option, type the exact certificate name that is being used by the camera.

Workaround

There are two workarounds you can use.

Workaround 1: Change the Archiver role encryption settings.
IMPORTANT: If you have multiple Archiver roles that are managing Axis units, you must change the encryption settings for each Archiver role. If the Axis cameras do not inherit settings from the Archiver role, you must change the encryption settings for each camera.
  1. From the home page in Config Tool, open the Video task.
  2. Select the Archiver role that is managing the Axis units.
  3. Click the Camera default settings tab, and click Show advanced settings.
  4. From the Encryption list, select In transit from the Archiver and click Apply.
    IMPORTANT: When you change the encryption settings to In transit from the Archiver, video streams from cameras to the Archiver role and G64 files that are recorded or stored in the Archiver are no longer encrypted. Video is only encrypted when it is requested from the Archiver role.
Workaround 2: If you do not want to change any of your configurations, you can configure an advanced setting in the Axis extension to stop using RTSPS.
IMPORTANT: If you have multiple Archiver roles that are managing Axis units, you must change the advanced setting for each Archiver role.
  1. From the home page in Config Tool, open the Video task.
  2. Select the Archiver role that is managing the Axis units.
  3. Click the Extensions tab and click the Axis extension.
  4. At the bottom of the Extensions tab, click Advanced settings.
  5. In the Advanced settings dialog box, add a new setting using the following fields:
    Name
    EndToEndEncryptionEnabled
    Value
    0
  6. Click Close > Apply.