AXISP1265MkIIModularPinholeCamera
Learnmore
Securekeystore
Atamper-protectedenvironmentfortheprotectionofprivatekeysandsecureexecutionofcryptographicoperations.Itprevents
unauthorizedaccessandmaliciousextractionintheeventofasecuritybreach.Dependingonsecurityrequirements,anAxisdevice
canhaveeitheroneormultiplehardware-basedcryptographiccomputingmodules,whichprovideahardware-protectedsecure
keystore.Dependingonsecurityrequirements,anAxisdevicecanhaveeitheroneormultiplehardware-basedcryptographic
computingmodules,likeaTPM2.0(TrustedPlatformModule)orasecureelement,and/oraTEE(TrustedExecutionEnvironment),
whichprovideahardware-protectedsecurekeystore.Furthermore,selectedAxisproductsfeatureaFIPS140-2Level2-certied
securekeystore.
AxisdeviceID
Beingabletoverifytheoriginofthedeviceiskeytoestablishingtrustinthedeviceidentity.Duringproduction,deviceswith
AxisEdgeVaultareassignedaunique,factory-provisioned,andIEEE802.1AR-compliantAxisdeviceIDcerticate.Thisworks
likeapassporttoprovetheoriginofthedevice.ThedeviceIDissecurelyandpermanentlystoredinthesecurekeystoreasa
certicatesignedbyAxisrootcerticate.ThedeviceIDcanbeleveragedbythecustomer’sITinfrastructureforautomatedsecure
deviceonboardingandsecuredeviceidentication
Signedvideo
Signedvideoensuresthatvideoevidencecanbeveriedasuntamperedwithoutprovingthechainofcustodyofthevideole.Each
camerausesitsuniquevideosigningkey,whichissecurelystoredinthesecurekeystore,toaddasignatureintothevideostream.
Whenthevideoisplayed,theleplayershowswhetherthevideoisintact.Signedvideomakesitpossibletotracethevideobackto
thecameraoriginandveriesthatthevideohasnotbeentamperedwithafteritleftthecamera.
Encryptedlesystem
Thesecurekeystorepreventsthemaliciousexltrationofinformationandpreventscongurationtamperingbyenforcingstrong
encryptionuponthelesystem.Thisensuresnodatastoredinthelesystemcanbeextractedortamperedwithwhenthedeviceis
notinuse,unauthenticatedaccesstothedeviceisachievedand/ortheAxisdeviceisstolen.Duringthesecurebootprocess,the
read-writelesystemisdecryptedandcanbemountedandusedbytheAxisdevice.
TolearnmoreaboutthecybersecurityfeaturesinAxisdevices,gotoaxis.com/learning/white-papersandsearchforcybersecurity.
Axissecuritynoticationservice
AxisprovidesanoticationservicewithinformationaboutvulnerabilityandothersecurityrelatedmattersforAxisdevices.Toreceive
notications,youcansubscribeataxis.com/security-notication-service.
Vulnerabilitymanagement
Tominimizecustomers'riskofexposure,Axis,asaCommonVulnerabilityandExposures(CVE)numberingauthority(CNA),follows
industrystandardstomanageandrespondtodiscoveredvulnerabilitiesinourdevices,software,andservices.Formoreinformation
aboutAxisvulnerabilitymanagementpolicy,howtoreportvulnerabilities,alreadydisclosedvulnerabilities,andcorresponding
securityadvisories,seeaxis.com/vulnerability-management.
SecureoperationofAxisdevices
Axisdeviceswithfactorydefaultsettingsarepre-conguredwithsecuredefaultprotectionmechanisms.Werecommendusingmore
securitycongurationwheninstallingthedevice.TondoutmoreaboutAxishardeningguidesandothercybersecurityrelated
documentation,gotoaxis.com/support/cybersecurity/resources.
Applications
Withapplications,youcangetmoreoutofyourAxisdevice.AXISCameraApplicationPlatform(ACAP)isanopenplatformthat
makesitpossibleforthirdpartiestodevelopanalyticsandotherapplicationsforAxisdevices.Applicationscanbepreinstalledonthe
device,availablefordownloadforfree,orforalicensefee.
TondtheusermanualsforAxisapplications,gotohelp.axis.com.
50