Axis Q3527-LVE - Security and Access Control

AXISQ3527-LVENetworkCamera
Thewebinterface
-Traps:
-Coldstart:Sendsatrapmessagewhenthedevicestarts.
-Warmstart:SendsatrapmessagewhenyouchangeanSNMPsetting.
-Linkup:Sendsatrapmessagewhenalinkchangesfromdowntoup.
-Authenticationfailed:Sendsatrapmessagewhenanauthenticationattemptfails.
Note
AllAxisVideoMIBtrapsareenabledwhenyouturnonSNMPv1andv2ctraps.Formoreinformation,see
AXISOSPortal>SNMP.
•v3:SNMPv3isamoresecureversion,whichprovidesencryptionandsecurepasswords.TouseSNMPv3,we
recommendyoutoactivateHTTPS,asthepasswordisthensentthroughHTTPS.Thisalsopreventsunauthorized
parties’accesstounencryptedSNMPv1andv2ctraps.IfyouuseSNMPv3,youcansetuptrapsthroughtheSNMPv3
managementapplication.
-Passwordfortheaccount“initial”:EntertheSNMPpasswordfortheaccountnamed“initial”.Althoughthe
passwordcanbesentwithoutactivatingHTTPS,wedon’trecommendit.TheSNMPv3passwordcanonly
besetonce,andpreferablyonlywhenHTTPSisenabled.Oncethepasswordisset,thepasswordeldisno
longerdisplayed.Tosetthepasswordagain,youmustresetthedevicetofactorydefaultsettings.
Security
Certicates
Certicatesareusedtoauthenticatedevicesonanetwork.Thedevicesupportstwotypesofcerticates:
•Client/servercerticates
Aclient/servercerticatevalidatesthedevice’sidentity,andcanbeself-signedorissuedbyaCerticateAuthority(CA).
Aself-signedcerticateofferslimitedprotectionandcanbeusedbeforeaCA-issuedcerticatehasbeenobtained.
•CAcerticates
YoucanuseaCAcerticatetoauthenticateapeercerticate,forexampletovalidatetheidentityofanauthentication
serverwhenthedeviceconnectstoanetworkprotectedbyIEEE802.1X.Thedevicehasseveralpre-installedCA
certicates.
Theseformatsaresupported:
•Certicateformats:.PEM,.CER,and.PFX
•Privatekeyformats:PKCS#1andPKCS#12
Important
Ifyouresetthedevicetofactorydefault,allcerticatesaredeleted.Anypre-installedCAcerticatesarereinstalled.
Filterthecerticatesinthelist.
Addcerticate:Clicktoaddacerticate.
Thecontextmenucontains:
•Certicateinformation:Viewaninstalledcerticate’sproperties.
•Deletecerticate:Deletethecerticate.
•Createcerticatesigningrequest:Createacerticatesigningrequesttosendtoaregistrationauthoritytoapply
foradigitalidentitycerticate.
Securekeystore
:
•Secureelement(CCEAL6+):Selecttousesecureelementforsecurekeystore.
•TrustedPlatformModule2.0(CCEAL4+,FIPS140-2Level2):SelecttouseTPM2.0forsecurekeystore.
IEEE802.1x
36