Axis P47-PLVE Series - Page 33

AXISP47-PLVEseries
Thewebinterface
-Warmstart:SendsatrapmessagewhenyouchangeanSNMPsetting.
-Linkup:Sendsatrapmessagewhenalinkchangesfromdowntoup.
-Authenticationfailed:Sendsatrapmessagewhenanauthenticationattemptfails.
Note
AllAxisVideoMIBtrapsareenabledwhenyouturnonSNMPv1andv2ctraps.Formoreinformation,see
AXISOSPortal>SNMP.
•v3:SNMPv3isamoresecureversion,whichprovidesencryptionandsecurepasswords.TouseSNMPv3,we
recommendyoutoactivateHTTPS,asthepasswordisthensentthroughHTTPS.Thisalsopreventsunauthorized
parties’accesstounencryptedSNMPv1andv2ctraps.IfyouuseSNMPv3,youcansetuptrapsthroughtheSNMPv3
managementapplication.
-Passwordfortheaccount“initial”:EntertheSNMPpasswordfortheaccountnamed“initial”.Althoughthe
passwordcanbesentwithoutactivatingHTTPS,wedon’trecommendit.TheSNMPv3passwordcanonly
besetonce,andpreferablyonlywhenHTTPSisenabled.Oncethepasswordisset,thepasswordeldisno
longerdisplayed.Tosetthepasswordagain,youmustresetthedevicetofactorydefaultsettings.
Security
Certicates
Certicatesareusedtoauthenticatedevicesonanetwork.Thedevicesupportstwotypesofcerticates:
•Client/servercerticates
Aclient/servercerticatevalidatesthedevice’sidentity,andcanbeself-signedorissuedbyaCerticateAuthority(CA).
Aself-signedcerticateofferslimitedprotectionandcanbeusedbeforeaCA-issuedcerticatehasbeenobtained.
•CAcerticates
YoucanuseaCAcerticatetoauthenticateapeercerticate,forexampletovalidatetheidentityofanauthentication
serverwhenthedeviceconnectstoanetworkprotectedbyIEEE802.1X.Thedevicehasseveralpre-installedCA
certicates.
Theseformatsaresupported:
•Certicateformats:.PEM,.CER,and.PFX
•Privatekeyformats:PKCS#1andPKCS#12
Important
Ifyouresetthedevicetofactorydefault,allcerticatesaredeleted.Anypre-installedCAcerticatesarereinstalled.
Addcerticate:Clicktoaddacerticate.
•More:Showmoreeldstollinorselect.
•Securekeystore:SelecttouseSecureelementorTrustedPlatformModule2.0tosecurelystoretheprivatekey.For
moreinformationonwhichsecurekeystoretoselect,gotohelp.axis.com/en-us/axis-os#cryptographic-support.
•Keytype:Selectthedefaultoradifferentencryptionalgorithmfromthedrop-downlisttoprotectthecerticate.
Thecontextmenucontains:
•Certicateinformation:Viewaninstalledcerticate’sproperties.
•Deletecerticate:Deletethecerticate.
•Createcerticatesigningrequest:Createacerticatesigningrequesttosendtoaregistrationauthoritytoapply
foradigitalidentitycerticate.
Securekeystore
:
•Secureelement(CCEAL6+):Selecttousesecureelementforsecurekeystore.
•TrustedPlatformModule2.0(CCEAL4+,FIPS140-2Level2):SelecttouseTPM2.0forsecurekeystore.
IEEE802.1xandIEEE802.1AEMACsec
33