Avigilon ENVR2 Plus User manual

User Guide
Avigilon ENVR2 Plus Appliance
ENVR2-PLUS-8P4
ENVR2-PLUS-8P8

Important Safety Information
This manual provides installation and operation information and precautions for the use of this device.
Incorrect installation could cause an unexpected fault. Before installing this equipment read this manual
carefully. Please provide this manual to the owner of the equipment for future use.
The Warning symbol indicates the presence of dangerous voltage within and outside the product
enclosure that may constitute a risk of electric shock, serious injury or death to persons if proper
precautions are not followed.
The Caution symbol alerts the user to the presence of hazards that may cause minor or moderate
injury to persons, damage to property or damage to the product itself if proper precautions are not
followed.
WARNING — Failure to observe the following instructions may result in severe injury or death.
lInstallation must be performed by qualified personnel only and must conform to all local codes.
lDo not open or disassemble the device. There are no user serviceable parts.
lThe coin cell battery is not replaceable. Replacement of the battery with an incorrect type is unsafe.
lConnect the power adapter by means of a power cord connected to a socket-outlet with earthing
connection.
CAUTION — Risk of explosion if battery is replaced by an incorrect type. Dispose of used batteries
according to the instructions.
CAUTION — Failure to observe the following instructions may result in injury or damage to the
appliance.
lDo not subject cables to excessive stress, heavy loads or pinching.
lDo not operate in dusty areas.
lThis device is for indoor use only.
lDo not expose this product to rain or use near water. If this product accidentally gets wet, unplug it
immediately.
lKeep product surfaces clean and dry. To clean the outside case of the device, gently wipe using a
lightly dampened cloth (only use water, do not use solvents).
lDo not install near any sources of vibration, such as motors.
lDo not install near any heat sources such as radiators or other sources of heat.
lDo not block ventilation openings located on the device enclosure as they are designed to keep the
system cool while running. Install or place this product in an area where there is ample air circulation.
lDo not insert anything into the device ventilation openings.
lDisposal of the battery into fire or a hot oven — or mechanically crushing or cutting the battery — can
result in an explosion.
2

lLeaving the battery in an extremely high temperature surrounding environment can result in an
explosion or the leakage of flammable liquid or gas.
lA battery subjected to extremely low air pressure may result in an explosion or the leakage of
flammable liquid or gas.
lUse only accessories recommended by Avigilon.
lKeep these safety instructions.
Regulatory Notices
This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions:
(1)this device may not cause harmful interference, and (2) this device must accept any interference received,
including interference that may cause undesired operation.
Note: This equipment has been tested and found to comply with the limits for a Class B digital
device, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable
protection against harmful interference in a residential installation. This equipment generates, uses
and can radiate radio frequency energy and, if not installed and used in accordance with the
instructions, may cause harmful interference to radio communications. However, there is no
guarantee that interference will not occur in a particular installation. If this equipment does cause
harmful interference to radio or television reception, which can be determined by turning the
equipment off and on, the user is encouraged to try to correct the interference by one or more of the
following measures:
lReorient or relocate the receiving antenna.
lIncrease the separation between the equipment and receiver.
lConnect the equipment into an outlet on a circuit different from that to which the receiver is
connected.
lConsult the dealer or an experienced radio/TV technician for help.
This Class B digital apparatus complies with Canadian ICES-003 (B)/NMB-3(B)
The use of EMC compliant support and auxiliary equipment with this device is required in order to fully
comply with the EMC regulatory standards.
Changes or modifications made to this equipment not expressly approved by Avigilon Corporation or parties
authorized by Avigilon Corporation could void the warranty and affect the user’s ability to operate this
equipment.
This equipment satisfies the requirements for use within a residential location.
3

Disposal and Recycling Information
When this product has reached the end of its useful life, please dispose of it according to your local
environmental laws and guidelines.
Risk of fire, explosion, and burns. Do not disassemble, crush, heat above 100 °C (212 °F), or incinerate.
European Union:
This symbol means that according to local laws and regulations your product should be disposed of
separately from household waste. When this product reaches its end of life, take it to a collection point
designated by local authorities. Some collection points accept products for free. The separate collection and
recycling of your product at the time of disposal will help conserve natural resources and ensure that it is
recycled in a manner that protects human health and the environment.
4

© 2022,Avigilon Corporation. All rights reserved. AVIGILON, the AVIGILON logo, AVIGILON CONTROL
CENTER, and ACC are trademarks of Avigilon Corporation. MAC, MacOS, FINDER and MACINTOSH are
registered trademarks of Apple Inc registered in the U.S. and other countries. FreeOPTPAuthenticator is the
trademark of the developer Red Hat. FIREFOX is a registered trademark of the Mozilla Foundation. Android is
a trademark of Google LLC. Other names or logos mentioned herein may be the trademarks of their
respective owners. The absence of the symbols ™ and ® in proximity to each trademark in this document or at
all is not a disclaimer of ownership of the related trademark.
This document has been compiled and published using product descriptions and specifications available at
the time of publication. The contents of this document and the specifications of the products discussed
herein are subject to change without notice. Avigilon Corporation reserves the right to make any such
changes without notice. Neither Avigilon Corporation nor any of its affiliated companies: (1) guarantees the
completeness or accuracy of the information contained in this document; or (2) is responsible for your use of,
or reliance on, the information. Avigilon Corporation shall not be responsible for any losses or damages
(including consequential damages) caused by reliance on the information presented herein.
Avigilon Corporation
avigilon.com
20221004
5

Table of Contents
Introduction 1
System Recommendations 1
Uninterruptible Power Supply 1
Camera Frame Rate 1
Web Browser 1
Networking 3
Passwords 3
Certificate Management 3
Package Contents 3
Optional Rack Mount Shelf Contents 4
Optional DIN Rail Mount Contents 4
Overview 4
Front View 4
Rear View 5
Supported Network Configurations 6
Setting Up the ENVR2 Plus Appliance 7
Installing the Hardware 7
Mounting to the Wall with the Supplied Brackets 7
Connecting the Hardware 9
Connect to the ENVR2 Plus Appliance (using DHCP) 9
Connecting to the ENVR2 Plus Appliance (using Static IP) 10
Configuring the ENVR2 Plus Appliance for the First Time 12
Troubleshooting 12
Network Configuration 13
Monitoring System Health 13
Installing the ACC Client 14
Activate the ACC Software and Connect to Avigilon Cloud Services 14
Activate ACC Software and Feature Licenses 14
Connect to Avigilon Cloud Services 15
Activating a License 15
Online Activation 15
Offline Activation 16
Reactivating aLicense 16
Starting Up and Shutting Down the ACC Client Software 17
6

Enabling Analytics on an ENVR2 Plus Appliance 18
Setting Up License Plate Recognition 18
LPR Performance Mode 19
Using Server Management 21
Starting and Stopping Server Management 21
Viewing PoE Port Status 22
Manage ACC Services 23
Enable ACC Client Users to Archive Video 23
Provide Server Logs and System Logs for Support 24
Manage Device Settings 24
Change the ENVR2 Plus Appliance Administrator Password 25
Manage Time Settings 26
Manage Storage 26
Connect the Device to Cameras and ACC Client Users 27
Assigning a PoE Power Budget 28
Providing Device Logs for Support 29
Connecting to External Devices 30
LEDIndicators 31
Front Panel LEDs 31
Back Panel LEDs 31
Budgeting PoE Power 33
Manage Certificates 34
Replace the Web Certificate 34
Upload a Trusted CA Certificate 36
Upgrade the Firmware 37
Using the Reset Button 39
Restarting the System 39
Restoring Factory Default Settings 39
Mounting with the Optional Rack Mount Kit 41
Mounting with the Optional DIN Rail Mount Kit 45
For More Information 47
7

Introduction
The Avigilon ENVR2 Plus Appliance is a network security appliance that provides all of the functionality of an
Avigilon Network Video Recorder with:
lAvigilon Hardened OS, Avigilon's secure, managed, embedded OS.
lAvigilon Control Center server software.
lIntegration of existing multi-megapixel IPcameras in your network that are not already analytic-
enabled with most of the features available on Avigilon analytic cameras:
lObject Detection — Detects and classifies people or vehicles to help operators verify and
respond faster. Unusual Activity Detection (UAD) automatically detects atypical behavior of
learned objects. Requires an ACC7-VAClicense.
lAvigilon Appearance Search™ — Quickly locates a specific person or vehicle of interest across
an entire site using a sophisticated deep-learning AI search engine.
lFace Recognition — Detects matches from managed watchlists to alert operators of people of
interest. Requires Appearance Search and an additional ACC7-FACElicense.
lNo-Face-Mask Detection — Detects when a person is not wearing a face mask, with the ability
to set-up alarms in ACC’s Focus of Attention interface, Radio Alert and ACC Mobile 3 app.
lLicense Plate Recognition (LPR) — Accurately captures license plates at a range of distances
and speeds. Detects matches from managed license plate watchlists to alert operators of
vehicles of interest. Requires an ACC7-LPR license.
System Recommendations
Uninterruptible Power Supply
Use an uninterruptible power supply (UPS) system to protect your video surveillance system hardware. A UPS
system is used to protect critical equipment from mains supply problems, including spikes, voltage dips,
fluctuations and complete power failures using a dedicated battery. It can also be used to power equipment
during the time it takes for a standby generator to be started and synchronized.
Camera Frame Rate
The ENVR2 Plus Appliance can provide analytics for non-analytics cameras. For optimal analytics
performance, the source camera should stream a minimum of 10 frames per second (fps).
Note: It is acceptable to use frame rates lower than 10 fps for LPR analytics.
Web Browser
Basic administration settings for the ENVR2 Plus Appliance are managed through its Server Management
Introduction 1

page, which can be accessed from the ACC Client application or a web browser on a network workstation
connected to the ENVR2 Plus Appliance.
Supported web browsers for Windows®, Mac or mobile devices include:
lMozilla Firefox®
lGoogle Chrome™
lMicrosoft Edge™
lSafari®
lChrome on Android™
lSafari on Apple® iOS
Note: Your web browser must be configured to accept cookies or the Server Management page will
not function correctly.
It is recommended to use the latest version of any supported web browser.
Web Browser 2

Networking
When locating where to install the ENVR2 Plus Appliance in a multi-server deployment, consider the
following items:
lBefore connecting the ENVR2 Plus Appliance, install the latest ACC Client software package on the
ACC Client PC.
lAt initial setup time, the ACC Client PC must have network access to the ENVR2 Plus Appliance. After
a multi-server site is created, the ACC Client PCs require network access to at least one site member.
For more information, see Installing the ACC Client on page14.
lInstall the ENVR2 Plus Appliance so that it can communicate over the network with all the ACC Site
member servers.
lDo not connect cameras to the ENVR2 Plus Appliance until after the appropriate network
configuration has been set up.
Passwords
The first time you start the ENVR2 Plus Appliance you must create new administrator passwords for both:
lThe ACC Site running on the ENVR2 Plus Appliance.
lThe Server Management page running on the ENVR2 Plus Appliance .
Without these passwords the ENVR2 Plus Appliance can only be brought back into service by resetting it to
its default state as it was when first delivered — all recorded data, updates made to the ACC Server software,
and all configuration settings are lost and cannot be restored.
Certificate Management
By default, the ENVR2 Plus Appliance is configured with a self-signed certificate, which generates a
connection warning in the web browser. Organizations that deploy their own PKI can use the Certificates
pane of the Server Management pageto manage certificates on the device. For more information, see
Manage Certificates on page34.
Package Contents
Ensure the package contains the following:
lAvigilon Video Appliance
lPower cord
lPower supply and screwdriver to secure it
lWall installation hardware
l2 x wall mount brackets
l4 x M4x5L bracket mounting screws
l4 x wall mounting wood screws
l4 x plastic drywall anchors
Networking 3

lDigital input/output terminal block connector
Optional Rack Mount Shelf Contents
If using the Rack Mount Shelf With Sliding Rails accessory kit (RMS1U-ENVR2-8P), ensure it contains the
following:
l2 x rack rails
l1 x shelf
l1 x U-bracket for securing the power supply
l8 x M4x5L ENVR2 Plus Appliance mounting screws
l10 x M5x10L rack mounting screws
l2 x M3x5L U-bracket screws
Optional DIN Rail Mount Contents
If using the DIN Rail Mount accessory kit (DIN-ENVR2-8P), ensure it contains the following:
l1 x DIN rail mount
l4 x M3x5L DINrail mounting screws
Overview
Front View
1. Reset button
2. Status LED
Provides information about daily operations. For more information, see LEDIndicators on page31.
Optional Rack Mount Shelf Contents 4

Rear View
1. Corporate network uplink port
Accepts a 1GbE Ethernet connection to the general network for ACC Client connections and to allow
users access to the web interface of the appliance.
2. Camera network uplink port
Accepts a 1GbE Ethernet connection to the cameras that are connected to the PoE switch component.
Can be used to link to other PoE switches and cameras, and to access the web interface of any
connected camera.
3. PoE switch component
Connect cameras to the 10/100 speed PoE switch component to power the cameras and record video.
4. Power connector
Accepts power to the appliance.
5. I/O connector
Provides connections to external input/output devices. For more information, see Connecting to
External Devices on page30.
Rear View 5

Supported Network Configurations
Note: The Camera Uplink Port does not support dynamically switching DHCP servers.
Network
Connections Camera Web
Interface
Access
Supported IP Configurations
Corporate LAN
Uplink
Camera LAN
Uplink
Notes
Corporate
LAN Uplink
only
No Static or DHCP
assigned
Unconnected
(leave as DHCP)
Camera LAN Uplink and
connected cameras will use
Zeroconf IP addresses.
Camera LAN
Uplink only
Yes Unconnected
(leave as DHCP)
Static, DHCP-
assigned, Zeroconf
Corporate and
Camera
LAN Uplink
via Camera
LAN Uplink
only
Static, DHCP-
assigned, Zeroconf
Static, DHCP-
assigned, Zeroconf
Corporate and Camera LAN
Uplinks must be on different
subnets.
Supported Network Configurations 6

Setting Up the ENVR2 Plus Appliance
Installing the Hardware
Install the ENVR2 Plus Appliance in a location free of dust and particles, vibration, and within the specified
operating temperature range. Otherwise any issues that arise will not be covered by the warranty.
The ENVR2 Plus Appliance can be installed as a stand-alone device, mounted on a wall using the supplied
mounting brackets, or kept in a server rack using the optional Rack Mount Shelf With Sliding Rails accessory
kit (RMS1U-ENVR2-8P), or mounted to a DIN rail using the optional DIN Rail Mount accessory kit (DIN-ENVR2-
8P). Follow the mounting instructions below for the type of mount you will be using.
Tip: You may want to mount the appliance before or after you have made all the required
connections depending on where you want to mount the device. See Connecting the Hardware on
page9 for more information on the required connections.
Mounting to the Wall with the Supplied Brackets
If you are not using the supplied mounting brackets, refer to the instructions for the mounting option you are
using:
lMounting with the Optional DIN Rail Mount Kit on page45
lMounting with the Optional Rack Mount Kit on page41
Follow these instructions to mount the ENVR2 Plus Appliance with the supplied mounting brackets.
1. Note down the serial number, located on the label on the underside of the device.
2. The wall mounting brackets can be mounted to either the lowest threaded holes on the sides of the
appliance (A) or the highest threaded holes on the sides of the appliance (B), depending on whether
you want to mount the ENVR2 Plus Appliance with the bottom or top towards the wall.
Setting Up the ENVR2 Plus Appliance 7

3. Use the four M4x5L screws provided to fasten each wall mounting bracket to the side of the appliance
in either the A or B position.
4. Screw the wall mounting brackets to the wall with the four wood screws provided. Using the drywall
anchors is recommended.
Tip: The appliance can be mounted in any orientation. Try not to mount in an orientation that
puts a lot of strain on the cables or connectors.
Mounting to the Wall with the Supplied Brackets 8

Connecting the Hardware
Before connecting to the ENVR2 Plus Appliance, mount the appliance using one of the three mounting
options. See Overview on page4 for connector and port locations.
1. Connect the cameras to the PoE ports.
2. Connect the corporate network port on the device to the local network with an Ethernet cable.
3. Connect power and wait for the device to start up. Wait for the power LED to turn green to indicate
that the device is turned on. It may take several minutes for the power LED to turn green the first
time the device is powered on. The PoE Status LED should be off, indicating the PoE power being
used is within the maximum power budget.
Note: The PoE Status LED status may change if the system detects that the total power
consumption exceeds the PoE limits. If the LEDis blinking orange, go to the PoE tab in the
Network panel of the ENVR2 Plus Appliance Web Interface to resolve the power budgeting
for each port. For more information, see Assigning a PoE Power Budget on page28.
Connect to the ENVR2 Plus Appliance (using DHCP)
If you use DHCPto assign IP addresses in your network, the new ENVR2 Plus Appliance is immediately
detected after it is connected to the security network. The ACC server software then adds it to the list of sites
that is displayed in the System Explorer when you start the ACC Client.
1. Power on the appliance and wait for it to startup. Check that the appliance LED indicators display the
correct status. See LEDIndicators on page31 for more information.
2. On a workstation connected to the same network as the ENVR2 Plus Appliance, start and log in to the
ACC Client software.
3. Locate the new site in the Site Login list. You are looking for a site labeled "ENVR2-PLUS-8Px-<serial
number>”.
4. The administrator username is pre-populated along with an empty password. Leave the
credentials as they are and click Log In.
5. You are prompted to enter new login credentials for the administrator user of the ACC Server running
on the ENVR2 Plus Appliance. Enter and confirm the new administrator password and click OK.
Important: Save the password in a secure format and location either physically or
electronically so that it can be retrieved if the password is forgotten.
6. In the Explorer right-click on the ENVR2 Plus Appliance and select Setup.
7. Click to select the server below the site you right-clicked in the previous step.
Connecting the Hardware 9

8. Click Server Management.
9. Click Trust on the certificate message that opens.
10. You are prompted to log in to the Server Management interface.
You are prompted to create a new password for the administrator user of the ENVR2 Plus
Appliance operating system. Enter and confirm the new administrator password, then click Apply. It is
recommended to not use the same credentials as the ACC system administrator.
Important: Save the password in a secure format and location either physically or
electronically so that it can be retrieved if the password is forgotten.
The Dashboard panel of Server Management for the ENVR2 Plus Appliance is displayed.
Note: On subsequent logins, you will need to enter the administrator username and this
password when logging in to the ENVR2 Plus Appliance Server Management interface. The
administrator is the only user that can log in to the Server Management interface.
11. Configure the basic settings for your new ENVR2 Plus Appliance in Server Management, including the
hostname, time zone, and language. For more information see Configuring the ENVR2 Plus Appliance
for the First Time on page12.
Connecting to the ENVR2 Plus Appliance (using Static IP)
After powering on the ENVR2 Plus Appliance:
Check that the appliance LED indicators display the correct status. See LEDIndicators on page31 for more
information.
1. Discover the appliance. Use File Explorer on a Windows computer or Finder® on a Macintosh
computer on the same local network as the ENVR2 Plus Appliance.
You are looking for a device labeled "ENVR2-PLUS-8Px-<serial number>” or the hostname you
configured in the Server Management page for this device.
If you cannot locate the appliance, see Troubleshooting on page12.
2. Click to connect to the device.
Important: By default, the ENVR2 Plus Appliance is configured with a self-signed certificate,
which generates a connection warning in the web browser. Organizations that deploy their
own PKI can use the Certificates pane of the Server Management pageto manage certificates
on the device. For more information, see Manage Certificates on page34.
Connecting to the ENVR2 Plus Appliance (using Static IP) 10

3. Click past any connection messages displayed by the web browser. You will see two warning
messages that differ slightly depending on the browser. For example, if the browser is:
lChrome—Click Advanced on the first screen and Proceed to <IPaddress>(unsafe) on the
second screen.
lFirefox—Click Advanced on the first screen and Add Exception on the second screen, check
Permanently store this exception, and click Confirm Security Exception.
4. You are prompted to log in to Server Management. You are prompted to create a new password for
the administrator user. Enter and confirm the new administrator password, then click Apply. This
is the new password for the system administrator of the ENVR2 Plus Appliance operating system.
Important: Save the password in a secure format and location either physically or
electronically so that it can be retrieved if the password is forgotten.
The Dashboard panel of the Server Management page is displayed.
Note: On subsequent logins, you will need to enter the administrator username and this
password when logging in to the Server Management interface. The administrator is the only
user that can log in to the Server Management interface.
5. On the navigation sidebar click Network.
6. Manually set the IP address for your new ENVR2 Plus Appliance in the Server Management page:
a. In each of the panes in the Network panel, click on the IPtab and toggle Automatic IP off to
manually specify the connections.
b. Enter the appropriate values in the following fields if you are manually entering the connection
settings:
lIP Address
lSubnet Mask
lDefault Gateway
c. Click Apply to save your changes.
7. Configure other basic settings, including the hostname, time zone, and language while you are logged
in to Server Management page. For more information see Configuring the ENVR2 Plus Appliance for
the First Time on the next page.
Connecting to the ENVR2 Plus Appliance (using Static IP) 11

Configuring the ENVR2 Plus Appliance for the First Time
To... From the
Navigation
Sidebar...
On the
Card...
Setting
Change the language for
Server Management
Click Device General Choose your language from the drop
down Language list
Replace the default server
name with a user-friendly
hostname
Hostname Change the Hostname
Set the time zone Time Specify the Time Zone and identify
the time source in the NTP drop-
down and Servers list.
For more information, see Manage Device Settings on page24.
For more information about the other configuration settings in Server Management, see Using Server
Management on page21.
If you are installing the first Avigilon appliance in your security network, you can now install the ACC Client
software on a network workstation or on the computer you are using to access Server Management. For
more information, see Installing the ACC Client on page14.
Troubleshooting
There are several ways you can discover a device that is supposed to connected to your network from a
network workstation. The recommended order to discover a device is:
lCheck that the appliance is connected to the local network with an Ethernet cable.
lUsing File Explorer (Windows) or Finder (Apple)
You are looking for a device labeled "ENVR2-PLUS-8Px-<serial number>” or the hostname you
configured in the Server Management page for this device.
Configuring the ENVR2 Plus Appliance for the First Time 12

lDiscover the DHCP-assigned IPaddress from the ACC Client software:
lLog into the site that uses this naming convention: ENVR2-PLUS-8Px-<serial number>.
Note: The username and password for the Web Interface application is separate from
the administrator username and password for the ACC Server.
lAccess the appliance from your web browser using the URLhttps://ENVR2-PLUS-8Px-<serial number>.
lUse the Address Resolution Protocol (ARP) to determine the IP address for the device:
1. Locate and copy down the MAC Address (MAC) listed on the Serial Number Tag for reference.
2. Open a Command Prompt window and enter the following command:
arp -a
3. Scroll through the response and look for the IP address corresponding to the MAC address.
If none of the above suggestions resolve the problem, contact Avigilon Technical Support.
Network Configuration
By default, the ENVR2 Plus Appliance acquires an IP address on the network through DHCP. If you need to
set up the ENVR2 Plus Appliance to use a static IP address or any specific network configuration, see the
Connecting to the ENVR2 Plus Appliance (using Static IP) on page10 for more information.
Monitoring System Health
You can monitor the health of the system components in the Site Health in the ACC Client software. See the
Help files provided with the ACC Client software, or the Avigilon ACC Client User Guide available from the
Avigilon website for more information.
Network Configuration 13