Axis P3384-V - Page 46

AXISP3384-VFixedDomeNetworkCamera
Aboutsystemoptions
Certicates
CACerticateTheCAcerticateisusedtovalidatetheidentityoftheauthenticationserver.Enterthepathto
thecerticatedirectly,orlocatetheleusingtheBrowsebutton.ThenclickUpload.Toremove
acerticate,clickRemove.
Clientcerticate
Clientprivatekey
Theclientcerticateandprivatekeyareusedtoauthenticatethenetworkdevice.Theycanbe
uploadedasseparatelesorinonecombinedle(e.g.aPFXleoraPEMle).UsetheClient
privatekeyeldifuploadingonecombinedle.Foreachle,enterthepathtothele,orlocatethe
leusingtheBrowsebutton.ThenclickUpload.Toremoveale,clickRemove.
Settings
EAPOLversion
SelecttheEAPOLversion(1or2)asusedinyournetworkswitch.
EAPidentity
Entertheuseridentity(maximum16characters)associatedwithyourcerticate.
Privatekeypassword
Enterthepassword(maximum16characters)fortheprivatekey.
EnableIEEE802.1X
ChecktheboxtoenabletheIEEE802.1Xprotocol.
Aboutcerticates
Certicatesareusedtoauthenticatedevicesonanetwork.Typicalapplicationsincludeencryptedwebbrowsing(HTTPS),network
protectionviaIEEE802.1Xandsecureuploadofimagesandnoticationmessagesforexampleviaemail.Twotypesofcerticates
canbeusedwiththeAxisproduct:
Server/Clientcerticates-ToauthenticatetheAxisproduct.AServer/Clientcerticatecanbeself-signedorissuedbyaCerticate
Authority(CA).Aself-signedcerticateofferslimitedprotectionandcanbeusedbeforeaCA-issuedcerticatehasbeenobtained.
CAcerticates-Toauthenticatepeercerticates,forexamplethecerticateofanauthenticationserverincasetheAxisproductis
connectedtoanIEEE802.1Xprotectednetwork.TheAxisproductisshippedwithseveralpreinstalledCAcerticates.
Note
•Iftheproductisresettofactorydefault,allcerticates,exceptpreinstalledCAcerticates,willbedeleted.
•Iftheproductisresettofactorydefault,allpreinstalledCAcerticatesthathavebeendeletedwillbereinstalled.
Howtocreateaself-signedcerticate
1.GotoSetup>SystemOptions>Security>Certicates.
2.ClickCreateself-signedcerticateandprovidetherequestedinformation.
HowtocreateandinstallaCA-signedcerticate
1.Createaself-signedcerticate,seeHowtocreateaself-signedcerticateonpage46.
2.GotoSetup>SystemOptions>Security>Certicates.
3.ClickCreatecerticatesigningrequestandprovidetherequestedinformation.
4.CopythePEM-formattedrequestandsendtotheCAofyourchoice.
5.Whenthesignedcerticateisreturned,clickInstallcerticateanduploadthecerticate.
HowtoinstalladditionalCAcerticates
1.GotoSetup>SystemOptions>Security>Certicates.
2.ClickInstallcerticateanduploadthecerticate.
46