Axis S3016 User manual

AXISS3016Recorder
Usermanual

AXISS3016Recorder
Aboutyourdevice
Aboutyourdevice
AXISS3016RecorderisanetworkvideorecorderwithintegratedPoEswitchandsurveillance-classharddrives.ItalsoincludesaUS
3.0portforeasyexportofvideofootage.Therecordercomesinthreemodels–8T,16Tand32T.
2

AXISS3016Recorder
Getstarted
Getstarted
Accessyourdevice
Findthedeviceonthenetwork
TondAxisdevicesonthenetworkandassignthemIPaddressesinWindows®,useAXISIPUtilityorAXISDeviceManagerExtend.
othapplicationsarefreeandcanbedownloadedfromaxis.com/support.
FormoreinformationabouthowtondandassignIPaddresses,gotoHowtoassignanIPaddressandaccessyourdevice.
Browsersupport
Youcanusethedevicewiththefollowingbrowsers:
ChromeTMFirefox®EdgeTMSafari®
Windows®recommendedrecommended
macOS®recommendedrecommended
Linux®recommendedrecommended
Otheroperatingsystems*
*TouseAXISOSwebinterfacewitiOS15oriPadOS15,gotoSettings Settings
Settings> > >Safari Safari Safari> > >Advanced Advanced Advanced> > >Experimental Experimental ExperimentalFeatures Features Featuresanddisable
NSURLSessionWebsocket.
Ifyouneedmoreinformationaboutrecommendedbrowsers,gotoAXISOSPortal.
Openthedevice'swebinterace
1.OpenabrowserandtypetheIPaddressorhostnameoftheAxisdevice.
IfyoudonotknowtheIPaddress,useAXISIPUtilityorAXISDeviceManagerExtendtondthedeviceonthenetwork.
2.Typetheusernameandpassword.Ifyouaccessthedeviceforthersttime,youmustcreateanadministratoraccount.See
Createanadministratoraccountonpage3.
Createanadministratoraccount
Thersttimeyoulogintoyourdevice,youmustcreateanadministratoraccount.
1.Enterausername.
2.Enterapassword.SeeSecurepasswordsonpage3.
3.Re-enterthepassword.
4.ClickAdduser.
Important
Thedevicehasnodefaultaccount.Ifyoulosethepasswordforyouradministratoraccount,youmustresetthedevice.See
Hardresetarecorderonpage10.
Securepasswords
Important
Axisdevicessendtheinitiallysetpasswordincleartextoverthenetwork.Toprotectyourdeviceaftertherstlogin,set
upasecureandencryptedHTTPSconnectionandthenchangethepassword.
3

AXISS3016Recorder
Getstarted
Thedevicepasswordistheprimaryprotectionforyourdataandservices.Axisdevicesdonotimposeapasswordpolicyasthey
maybeusedinvarioustypesofinstallations.
Toprotectyourdatawestronglyrecommendthatyou:
•Useapasswordwithatleast8characters,preferablycreatedbyapasswordgenerator.
•Don’texposethepassword.
•Changethepasswordatarecurringinterval,atleastonceayear.
Veriythatnoonehastamperedwiththermware
TomakesurethatthedevicehasitsoriginalAxisrmware,ortotakefullcontrolofthedeviceafterasecurityattack:
1.Resettofactorydefaultsettings.SeeHardresetarecorderonpage10.
Afterthereset,securebootguaranteesthestateofthedevice.
2.Congureandinstallthedevice.
Webinteraceoverview
Thisvideogivesyouanoverviewofthedevice’swebinterface.
Towatchthisvideo,gotothewebversionofthisdocument.
elp.axis.com/?&piaId=73282&section=web-interface-overview
Axisdevicewebinterface
GetstartedwithAXISCompanion
Note
Internetaccessisrequiredduringthesystemsetup.
Installationoverview:
1.RegisteraMyAxisaccountonpage5
2.Installteardwareonpage5
3.Installtedesktopapponpage5
4.Createasiteonpage6
5.Installtemobileapponpage6
Resultofsysteminstallation:
•ThermwareisupgradedonallAxisdevices.
•Apasswordissetforthedevices.
4

AXISS3016Recorder
Getstarted
•Therecordingsareenabledwithdefaultsettings.
•Theremoteaccessisenabled.
RegisteraMyAxisaccount
RegisteraMyAxisaccountataxis.com/my-axis/login.
YoucanmakeyourMyAxisaccountmoresecurebyactivatingmulti-factorauthentication(MFA).MFAisasecuritysystemthat
addsanotherlayerofvericationtoensuretheuser’sidentity.
ActivateMFA:
1.LoginwithyourMyAxiscredentials.
2.GotoandselectAccountsettings.
3.ClickSecuritysettings
4.Turnon2–Stepverication.
Youareredirectedtoaloginpage.
5.LoginwithyourMyAxiscredentials.
MFAisnowactive.
LoginwhenMFAisactive:
1.LogintoyourMyAxisaccount.
Anemailissenttoyou.
2.OpentheemailandclickAuthenticate.
Ifyoudidn’treceiveanemail,checkifit’sinyourspamfolder.Ifit’snotthere,contactITsupport.
Installthehardware
1.Installyourcamerahardware.
2.ConnecttherecordertoyournetworkviatheLANport.
3.Connectthecamerastotherecorder’sintegratedPoEswitchoranexternalPoEswitch.
4.Connectthecomputertothesamenetworkastherecorder.
5.Connectthepowersupplytotherecorder.
Important
Youmustrstconnectthepowercordtotherecorder,andthenconnectthepowercordtothepoweroutlet.
6.Waitafewminutesfortherecorderandcamerastobootupbeforeproceeding.
CATION
Keeptherecorderinawellventilatedenvironmentandwithplentyofemptyspacearoundtherecordertoavoidoverheating.
Installthedesktopapp
1.Gotoaxis.com/products/axis-companionandclickDownloadtodownloadAXISCompanionversion4forWindows.
2.Openthesetupleandfollowthewizard.
5

AXISS3016Recorder
Getstarted
3.SigninwithyourMyAxisaccount.
Createasite
Asiteisasinglepointofentrytoasurveillancesolution,forexampleallcamerasinastore.Youcankeeptrackofseveralsites
throughasingleMyAxisaccount.
Note
IfyouhaveusedanearlierversionofAXISCompanion,thesitesyoucreatedwillnotappearinthe
listofsitesinAXISCompanionversion4.Youmightalsohavedevicesthatarenotsupported.See
MigratingfromAXISCompanionClassictoversion4formoreinformation.
1.StarttheAXISCompaniondesktopapp.
2.SigninwithyourMyAxisaccount.
3.ClickCreatenewsite.
4.Nameyoursiteandenteryourcompanyname.
5.ClickNext.
6.Selectthedevicesyouwanttoaddtoyoursite.
7.ClickNext.
8.Enterapassword.
UsethispasswordtoaccessthewebinterfaceofyourdevicesorofinemodeintheAXISCompanionmobileapp.
9.ClickNext.
10.OntheReadytoinstallpage,Ofinemodeandpgradermwareareturnedonbydefault.Youcanturnthemoffifyou
donotwanttoaccessofinemodeorupgradeyourdevicestothelatestrmwareversion.
11.ClickInstallandwaitwhileAXISCompanionconguresthedevices.
Thecongurationmaytakeseveralminutes.
Installthemobileapp
WithAXISCompanionmobileapp,youcanaccessyourdevicesandrecordingsfromanywhere.Youcanalsogetnoticationswhen
suspiciouseventsoccur,orwhensomeonecallsfromanintercom.
ForAndroid
ClickDownloadorscanthefollowingQRCode.
6

AXISS3016Recorder
Getstarted
ForiOS
ClickDownloadorscanthefollowingQRCode.
OpentheAXISCompanionappandloginwithyourAxiscredentials.
Ifyoudon’thaveaMyAxisaccount,youcangotoaxis.com/my-axistoregisteranewaccount.
GetstartedwithAXISCameraStation
Addyourrecorder
Note
AXISCameraStationremovesrecordingsfromanyprevioussystemwhenyouaddtherecordertoanewsystem.
1.GotoConguration>Devices>Adddevices.
2.SelectyourrecorderinthelistandclickAdd.Ifyourrecorderisnotlisted,useManualsearchtonditmanually.
3.UsethedefaultsettingsandclickNext.
4.Setyourpasswordforstorageencryption.ClickNext.Youneedthispasswordtoaccesstherecorderharddriveoutside
AXISCameraStationorwhentherecorderisresettofactorydefaultsettingsfromthedevice’swebinterface.
5.GotoConguration>Devices>Otherdevicesandchecktherecorderhasbeenadded.
6.GotoConguration>Storage>Managementandchecktherecorderhasbeenaddedtothestoragelist.
Adddevicesandselecttherecorderasrecordingstorage
1.GotoConguration>Devices>Adddevices.
2.SelectyourdevicesinthelistandclickAdd.Ifyourdevicesarenotlisted,useManualsearchtondthemmanually.
3.UsethedefaultsettingsandclickNext.
4.ManuallyselecttherecorderfromtheRecordingstoragedrop-downlistandclickInstall.
Note
TherecorderwillnotbeselectedasrecordingstorageifyouselectAutomatic.
5.GotoConguration>Storage>Selection.Clickyourdevicesandcheckthattherecordingstorageistherecorder.
7

AXISS3016Recorder
Getstarted
Congurerecordings
1.GotoConguration>Storage>Selectionandselectyourdevice.
2.CongureRetentiontime.
-Selectnlimitedretentiontimetokeeprecordingsuntilthestoragebecomesfull.
-SelectLimitedandsetthemaximumnumberofdaystokeeprecordings.
3.ClickApply.
Note
FallbackrecordingisenabledbydefaulttostoretherecordingsonyourrecorderwhentheconnectionbetweenAXISCamera
Stationandtherecorderislost.SeeFallbackrecording.
8

AXISS3016Recorder
Configureyourdevice
Configureyourdevice
Allocatepower
Therecorderreservesacertainamountofpowerforeachport.Thetotalreservedpowercan’texceedthetotalpowerbudget.A
portwillnotbepoweredupiftherecordertriestoreservemorepowerthanwhatisavailable.Thismakessurethatallofthe
connecteddeviceswillbepowered.
Example
Inthisexample:
•AXISS3016Recorderhasatotalpowerbudgetof305W.
•PoEclass3device.Requests15.5Wpowerbutactuallyconsumes7.5Wpower.
•PoEclass4device.Requests30Wpowerbutactuallyconsumes15Wpower.
•Reservedpower.
•Actualpowerconsumption.
ReservedpowerActualpowerconsumption
•Eachportreservestheamountofpoweraccordingtothedevice’sPoEclass.
•Therecordercanpower9PoEclass4devicesand2PoEclass3devices.
•Thetotalpowerreservedis(9x30)+(2x15.5)=301W.
•Theactualpowerconsumedis(9x15)+(2x7.5)=150W.
9

AXISS3016Recorder
Configureyourdevice
ChangetheRAIDlevel
CATION
ChangingtheRAIDlevelreformatsthelesystemanddeletesalldatafromyourdisks.
1.Inthedevicewebinterface,gotoSystem>Storage.
2.UnderTools,selectChangeRAIDlevelandclicksetool.
3.SelectaRAIDlevelandclickNext.
4.SelectEncryptthediskandtypeyourpassword.ClickNext.
5.ClickYes.
6.Thestatusmessageappearsintheupper-rightcorner.WaituntiltheoperationisdoneandRAIDconfigured
isshownbeforeclosingthepage.
Replaceaharddrive
Note
Toavoidelectrostaticdischarge,werecommendthatyoualwaysuseastaticmatandstaticstrapwhileworkingon
componentsintheinteriorofthesystem.
1.Loosenthescrewsattheleftandrightofthebezelandremovethebezel.
2.LocatethebrokenharddriveindicatedbyaredLED.
AllLEDsareredincaseofaRAIDfailure.Toidentifythebrokenharddrive,gotothedevicewebinterfaceandgo
toSystem>Storage>Harddrivestatus.
3.Loosenthescrewfortheharddrivesled(T10).
4.Pulltheharddrivesledoutoftheharddrivebay.
5.Loosenthefourscrewsfortheharddrive(T8).
6.Taketheharddriveoutoftheharddrivesled.
7.Insertanewharddriveintotheharddrivesled.
8.Fastenthefourscrewsfortheharddrive.
9.Insertandpushtheharddrivesledallthewayintotheharddrivebay.
10.Fastenthescrewfortheharddrivesled.WaituntiltheLEDturnsgreen.
11.Attachthebezelandfastenthescrewsattheleftandrightofthebezel.
CreateanewRAID
CATION
YouonlycreateanewRAIDincaseofaRAIDfailure.CreatinganewRAIDdeletesalldatafromyourharddrives.
1.Replacethebrokenharddrives.SeeReplaceaarddriveonpage10.
2.ConguretheRAID.SeeCangeteRAIDlevelonpage9.
3.Congurerecordingsinyourvideomanagementsystem.SeeGetstartedwitAXISCompaniononpage4andGet
startedwitAXISCameraStationonpage7.
10

AXISS3016Recorder
Configureyourdevice
Hardresetarecorder
Important
Movetherecordercarefullywhileit’sswitchedon.Suddenmovesorshocksmaydamagetheharddrive.
Note
•Ahardresetwillresetallthesettings,includingtheIPaddress.
•Ahardresetwillnotremoveyourrecordings.
1.Switchofftherecorder:
Pressthepowerbuttononthefrontoftherecorderfor4-5secondsuntilyouhearabeep.
2.Waituntiltherecorderisswitchedoff,thenturnitovertoaccessthecontrolbutton.
3.Pressandholdthecontrolbutton.Pressandreleasethepowerbuttontostarttherecorder.Releasethecontrolbutton
after15-30secondswhentheLEDindicatorashesamber.
4.Carefullyputtherecorderbackinitsplace.
5.TheprocessiscompletewhenthestatusLEDindicatorturnsgreen.Theproducthasbeenresettothefactorydefault
settings.IfnoDHCPserverisavailableonthenetwork,thedefaultIPaddressis192.168.0.90
6.Ifyourharddriveisencrypted,itmustbemountedmanuallyaftertherecorderisreset:
6.1Gotothedevice’swebinterface.
6.2GotoSystem>StorageandclickMount.
6.3Entertheencryptionpasswordusedwhenencryptingtheharddrive.
11

AXISS3016Recorder
Tewebinterface
Tewebinterface
Toreachthedevice’swebinterface,typethedevice’sIPaddressinawebbrowser.
Note
Supportforthefeaturesandsettingsdescribedinthissectionvariesbetweendevices.Thisiconindicatesthat
thefeatureorsettingisonlyavailableinsomedevices.
Showorhidethemainmenu.
Accessthereleasenotes.
Accesstheproducthelp.
Changethelanguage.
Setlightthemeordarktheme.
Theusermenucontains:
•Informationabouttheuserwhoisloggedin.
•Changeaccount:Logoutfromthecurrentaccountandlogintoanewaccount.
•Logout:Logoutfromthecurrentaccount.
Thecontextmenucontains:
•Analyticsdata:Accepttosharenon-personalbrowserdata.
•Feedback:Shareanyfeedbacktohelpusimproveyouruserexperience.
•Legal:Viewinformationaboutcookiesandlicenses.
•About:Viewdeviceinformation,includingrmwareversionandserialnumber.
•Legacydeviceinterface:Changethedevice’swebinterfacetothelegacyversion.
Status
Deviceinfo
Showsthedeviceinformation,includingrmwareversionandserialnumber.
pgradermware:Upgradethermwareonyourdevice.TakesyoutotheMaintenancepagewhereyoucandoarmware
upgrade.
Timesyncstatus
ShowsNTPsynchronizationinformation,includingifthedeviceisinsyncwithanNTPserverandthetimeremaininguntil
thenextsync.
NTPsettings:ViewandupdatetheNTPsettings.TakesyoutotheDateandtimepagewhereyoucanchangetheNTPsettings.
Security
12

AXISS3016Recorder
Tewebinterface
Showswhatkindofaccesstothedevicethatisactive,andwhatencryptionprotocolsareinuse.Recommendationstothesettings
arebasedontheAXISOSHardeningGuide.
Hardeningguide:LinktoAXISOSHardeningguidewhereyoucanlearnmoreaboutcybersecurityonAxisdevicesandbest
practices.
Networkports
ShowsthestatusofnetworkportsandpowerinformationincludingallocatedpowerandtotalPoEconsumption.
Networkportssettings:ClicktogototheNetworkportspagewhereyoucanchangethesettings.
Storage
Showsthestoragestatusandinformationincludingfreespaceanddisktemperature.
Storagesettings:ClicktogototheOnboardstoragepagewhereyoucanchangethesettings.
Connectedclients
Showsthenumberofconnectionsandconnectedclients.
Viewdetails:Viewandupdatethelistoftheconnectedclients.ThelistshowsIPaddress,protocol,port,andPID/Process
ofeachclient.
Ongoingrecordings
Showsongoingrecordingsandtheirdesignatedstoragespace.
Recordings:Viewongoingandlteredrecordingsandtheirsource.Formoreinformation,seeRecordingsonpage13
Showsthestoragespacewheretherecordingissaved.
Recordings
Playtherecording.
Stopplayingtherecording.
Showorhideinformationandoptionsabouttherecording.
Setexportrange:Ifyouonlywanttoexportpartoftherecording,enteratimespan.
Encrypt:Selecttosetapasswordforexportedrecordings.Itwillnotbepossibletoopentheexportedlewithoutthepassword.
Clicktodeletearecording.
Export:Exportthewholeorapartoftherecording.
13

AXISS3016Recorder
Tewebinterface
Clicktoltertherecordings.
From:Showrecordingsdoneafteracertainpointintime.
To:Showrecordingsupuntilacertainpointintime.
Source:Showrecordingsbasedonsource.Thesourcereferstothesensor.
Event:Showrecordingsbasedonevents.
Storage:Showrecordingsbasedonstoragetype.
Apps
Addapp:Installanewapp.
Findmoreapps:Findmoreappstoinstall.YouwillbetakentoanoverviewpageofAxisapps.
Allowunsignedapps:Turnontoallowinstallationofunsignedapps.
Allowroot-privilegedapps:Turnontoallowappswithrootprivilegesfullaccesstothedevice.
ViewthesecurityupdatesinAXISOSandACAPapps.
Note
Thedevice’sperformancemightbeaffectedifyourunseveralappsatthesametime.
Usetheswitchnexttotheappnametostartorstoptheapp.
Open:Accesstheapp’ssettings.Theavailablesettingsdependontheapplication.Someapplicationsdon’thaveanysettings.
Thecontextmenucancontainoneormoreofthefollowingoptions:
•Open-sourcelicense:Viewinformationaboutopen-sourcelicensesusedintheapp.
•Applog:Viewalogoftheappevents.Thelogishelpfulwhenyoucontactsupport.
•Activatelicensewithakey:Iftheapprequiresalicense,youneedtoactivateit.Usethisoptionifyourdevice
doesn’thaveinternetaccess.
Ifyoudon’thavealicensekey,gotoaxis.com/products/analytics.YouneedalicensecodeandtheAxisproductserial
numbertogeneratealicensekey.
•Activatelicenseautomatically:Iftheapprequiresalicense,youneedtoactivateit.Usethisoptionifyourdevicehas
internetaccess.Youneedalicensecodetoactivatethelicense.
•Deactivatethelicense:Deactivatethelicensetoreplaceitwithanotherlicense,forexample,whenyouchangefroma
triallicensetoafulllicense.Ifyoudeactivatethelicense,youalsoremoveitfromthedevice.
•Settings:Conguretheparameters.
•Delete:Deletetheapppermanentlyfromthedevice.Ifyoudon’tdeactivatethelicenserst,itremainsactive.
System
Timeandlocation
Dateandtime
Thetimeformatdependsonthewebbrowser’slanguagesettings.
14

AXISS3016Recorder
Tewebinterface
Note
Werecommendyousynchronizethedevice’sdateandtimewithanNTPserver.
Synchronization:Selectanoptionforthedevice’sdateandtimesynchronization.
•Automaticdateandtime(manualNTSKEservers):SynchronizewiththesecureNTPkeyestablishmentservers
connectedtotheDHCPserver.
-ManualNTSKEservers:EntertheIPaddressofoneortwoNTPservers.WhenyouusetwoNTPservers,
thedevicesynchronizesandadaptsitstimebasedoninputfromboth.
•Automaticdateandtime(NTPserversusingDHCP):SynchronizewiththeNTPserversconnectedtotheDHCPserver.
-FallbackNTPservers:EntertheIPaddressofoneortwofallbackservers.
•Automaticdateandtime(manualNTPservers):SynchronizewithNTPserversofyourchoice.
-ManualNTPservers:EntertheIPaddressofoneortwoNTPservers.WhenyouusetwoNTPservers,the
devicesynchronizesandadaptsitstimebasedoninputfromboth.
•Customdateandtime:Manuallysetthedateandtime.ClickGetfromsystemtofetchthedateandtimesettings
oncefromyourcomputerormobiledevice.
Timezone:Selectwhichtimezonetouse.Timewillautomaticallyadjusttodaylightsavingtimeandstandardtime.
Note
Thesystemusesthedateandtimesettingsinallrecordings,logs,andsystemsettings.
Network
IPv4
AssignIPv4automatically:SelecttoletthenetworkrouterassignanIPaddresstothedeviceautomatically.Werecommend
automaticIP(DHCP)formostnetworks.
IPaddress:EnterauniqueIPaddressforthedevice.StaticIPaddressescanbeassignedatrandomwithinisolatednetworks,
providedthateachaddressisunique.Toavoidconicts,werecommendyoucontactyournetworkadministratorbeforeyou
assignastaticIPaddress.
Subnetmask:Enterthesubnetmasktodenewhataddressesareinsidethelocalareanetwork.Anyaddressoutsidethelocal
areanetworkgoesthroughtherouter.
Router:EntertheIPaddressofthedefaultrouter(gateway)usedtoconnectdevicesthatareattachedtodifferentnetworksand
networksegments.
FallbacktostaticIPaddressifDHCPisn’tavailable:SelectifyouwanttoaddastaticIPaddresstouseasfallbackifDHCP
isunavailableandcan’tassignanIPaddressautomatically.
Note
IfDHCPisn’tavailableandthedeviceusesastaticaddressfallback,thestaticaddressisconguredwithalimitedscope.
IPv6
AssignIPv6automatically:SelecttoturnonIPv6andtoletthenetworkrouterassignanIPaddresstothedeviceautomatically.
Hostname
Assignhostnameautomatically:Selecttoletthenetworkrouterassignahostnametothedeviceautomatically.
Hostname:Enterthehostnamemanuallytouseasanalternativewayofaccessingthedevice.Theserverreportandsystemlog
usethehostname.AllowedcharactersareA–Z,a–z,0–9and-.
DNSservers
15

AXISS3016Recorder
Tewebinterface
AssignDNSautomatically:SelecttolettheDHCPserverassignsearchdomainsandDNSserveraddressestothedevice
automatically.WerecommendautomaticDNS(DHCP)formostnetworks.
Searchdomains:Whenyouuseahostnamethatisnotfullyqualied,clickAddsearchdomainandenteradomaininwhichto
searchforthehostnamethedeviceuses.
DNSservers:ClickAddDNSserverandentertheIPaddressoftheDNSserver.ThisprovidesthetranslationofhostnamestoIP
addressesonyournetwork.
Networkdiscoveryprotocols
Bonjour®:Turnontoallowautomaticdiscoveryonthenetwork.
Bonjourname:Enterafriendlynametobevisibleonthenetwork.ThedefaultnameisthedevicenameandMACaddress.
PnP®:Turnontoallowautomaticdiscoveryonthenetwork.
PnPname:Enterafriendlynametobevisibleonthenetwork.ThedefaultnameisthedevicenameandMACaddress.
WS-Discovery:Turnontoallowautomaticdiscoveryonthenetwork.
One-clickcloudconnection
One-clickcloudconnection(O3C)togetherwithanO3Cserviceprovideseasyandsecureinternetaccesstoliveandrecordedvideo
fromanylocation.Formoreinformation,seeaxis.com/end-to-end-solutions/osted-services.
AllowO3C:
•One-click:Thisisthedefaultsetting.PressandholdthecontrolbuttononthedevicetoconnecttoanO3Cservice
overtheinternet.YouneedtoregisterthedevicewiththeO3Cservicewithin24hoursafteryoupressthecontrol
button.Otherwise,thedevicedisconnectsfromtheO3Cservice.Onceyouregisterthedevice,Alwaysisenabledand
thedevicestaysconnectedtotheO3Cservice.
•Always:ThedeviceconstantlyattemptstoconnecttoanO3Cserviceovertheinternet.Onceyouregisterthedevice,
itstaysconnectedtotheO3Cservice.Usethisoptionifthecontrolbuttononthedeviceisoutofreach.
•No:DisablestheO3Cservice.
Proxysettings:Ifneeded,entertheproxysettingstoconnecttotheproxyserver.
Host:Entertheproxyserver’saddress.
Port:Entertheportnumberusedforaccess.
LoginandPassword:Ifneeded,enterusernameandpasswordfortheproxyserver.
Authenticationmethod:
•Basic:ThismethodisthemostcompatibleauthenticationschemeforHTTP.It’slesssecurethantheDigestmethod
becauseitsendstheusernameandpasswordunencryptedtotheserver.
•Digest:Thismethodismoresecurebecauseitalwaystransfersthepasswordencryptedacrossthenetwork.
•Auto:Thisoptionletsthedeviceselecttheauthenticationmethoddependingonthesupportedmethods.Itprioritizes
theDigestmethodovertheBasicmethod.
Ownerauthenticationkey(OAK):ClickGetkeytofetchtheownerauthenticationkey.Thisisonlypossibleifthedeviceis
connectedtotheinternetwithoutarewallorproxy.
16

AXISS3016Recorder
Tewebinterface
Networkports
PoweroverEthernet
•Allocatedpower:Numberofwatts(W)thatarecurrentlyallocated.
•TotalPoEconsumption:Numberofwatts(W)thatareconsumed.
•KeepPoEactiveduringrecorderrestart:Turnontosupplypowertoconnecteddevicesduringarestartoftherecorder.
Clicktoshoworhidetheportsimage.
•Clickaportintheimagetoseetheportdetailsintheportlist.
Portlist
•Port:Theportnumber.
•PoE:TurnonoroffPoEfortheport.
•Network:Turnonoroffnetworkfortheport.
•Status:Showsifthereisdeviceconnectedtothisport.
•Friendlyname:ThefriendlynameissetinNetworksettings.Thedefaultnameisacombinationofthemodeland
themediaaccesscontroladdress(MACaddress)oftheconnecteddevice.
•Powerconsumption:Numberofwatts(W)thatarecurrentlyconsumedandallocatedbytheconnecteddevice.
Security
Certicates
Certicatesareusedtoauthenticatedevicesonanetwork.Thedevicesupportstwotypesofcerticates:
•Client/servercerticates
Aclient/servercerticatevalidatesthedevice’sidentity,andcanbeself-signedorissuedbyaCerticateAuthority(CA).
Aself-signedcerticateofferslimitedprotectionandcanbeusedbeforeaCA-issuedcerticatehasbeenobtained.
•CAcerticates
YoucanuseaCAcerticatetoauthenticateapeercerticate,forexampletovalidatetheidentityofanauthentication
serverwhenthedeviceconnectstoanetworkprotectedbyIEEE802.1X.Thedevicehasseveralpre-installedCA
certicates.
Theseformatsaresupported:
•Certicateformats:.PEM,.CER,and.PFX
•Privatekeyformats:PKCS#1andPKCS#12
Important
Ifyouresetthedevicetofactorydefault,allcerticatesaredeleted.Anypre-installedCAcerticatesarereinstalled.
Filterthecerticatesinthelist.
Addcerticate:Clicktoaddacerticate.
•More:Showmoreeldstollinorselect.
•Securekeystore:SelecttouseSecureelementorTrustedPlatformModule2.0tosecurelystoretheprivatekey.For
moreinformationonwhichsecurekeystoretoselect,gotoelp.axis.com/en-us/axis-os#cryptograpic-support.
•Keytype:Selectthedefaultoradifferentencryptionalgorithmfromthedrop-downlisttoprotectthecerticate.
Thecontextmenucontains:
•Certicateinformation:Viewaninstalledcerticate’sproperties.
•Deletecerticate:Deletethecerticate.
•Createcerticatesigningrequest:Createacerticatesigningrequesttosendtoaregistrationauthoritytoapply
foradigitalidentitycerticate.
Securekeystore:
17

AXISS3016Recorder
Tewebinterface
•Secureelement(CCEAL6+):Selecttousesecureelementforsecurekeystore.
•TrustedPlatformModule2.0(CCEAL4+,FIPS140-2Level2):SelecttouseTPM2.0forsecurekeystore.
IEEE802.1x
IEEE802.1xisanIEEEstandardforport-basednetworkadmissioncontrolprovidingsecureauthenticationofwiredandwireless
networkdevices.IEEE802.1xisbasedonEAP(ExtensibleAuthenticationProtocol).
ToaccessanetworkprotectedbyIEEE802.1x,networkdevicesmustauthenticatethemselves.Theauthenticationisperformedby
anauthenticationserver,typicallyaRADIUSserver(forexample,FreeRADIUSandMicrosoftInternetAuthenticationServer).
Certicates
WhenconguredwithoutaCAcerticate,servercerticatevalidationisdisabledandthedevicetriestoauthenticateitself
regardlessofwhatnetworkitisconnectedto.
Whenusingacerticate,inAxis'implementation,thedeviceandtheauthenticationserverauthenticatethemselveswithdigital
certicatesusingEAP-TLS(ExtensibleAuthenticationProtocol-TransportLayerSecurity).
Toallowthedevicetoaccessanetworkprotectedthroughcerticates,youmustinstallasignedclientcerticateonthedevice.
Clientcerticate:SelectaclientcerticatetouseIEEE802.1x.Theauthenticationserverusesthecerticatetovalidatethe
client’sidentity.
CAcerticate:SelectCAcerticatestovalidatetheauthenticationserver’sidentity.Whennocerticateisselected,thedevice
triestoauthenticateitselfregardlessofwhatnetworkitisconnectedto.
EAPidentity:Entertheuseridentityassociatedwiththeclientcerticate.
EAPOLversion:SelecttheEAPOLversionthatisusedinthenetworkswitch.
seIEEE802.1x:SelecttousetheIEEE802.1xprotocol.
Custom-signedrmwarecerticate
ToinstalltestrmwareorothercustomrmwarefromAxisonthedevice,youneedacustom-signedrmwarecerticate.The
certicateveriesthatthermwareisapprovedbyboththedeviceownerandAxis.Thermwarecanonlyrunonaspecic
devicewhichisidentiedbyitsuniqueserialnumberandchipID.OnlyAxiscancreatecustom-signedrmwarecerticates,
sinceAxisholdsthekeytosignthem.
Install:Clicktoinstallthecerticate.Youneedtoinstallthecerticatebeforeyouinstallthermware.
Accounts
Accounts
Addaccount:Clicktoaddanewaccount.Youcanaddupto100accounts.
Account:Enterauniqueaccountname.
Newpassword:Enterapasswordfortheaccount.Passwordsmustbe1to64characterslong.OnlyASCIIprintablecharacters
(code32to126)areallowedinthepassword,forexample,letters,numbers,punctuation,andsomesymbols.
Repeatpassword:Enterthesamepasswordagain.
Privileges:
•Administrator:Hasfullaccesstoallsettings.Administratorscanalsoadd,update,andremoveotheraccounts.
•Operator:Hasaccesstoallsettingsexcept:
-AllSystemsettings.
18

AXISS3016Recorder
Tewebinterface
-Addingapps.
•Viewer:Hasaccessto:
-Watchandtakesnapshotsofavideostream.
-Watchandexportrecordings.
-Pan,tilt,andzoom;withPTZuseraccess.
Thecontextmenucontains:
pdateaccount:Edittheaccountproperties.
Deleteaccount:Deletetheaccount.Youcan’tdeletetherootaccount.
SSHaccounts
AddSSHaccount:ClicktoaddanewSSHaccount.
•Restrictrootaccess:Turnontorestrictfunctionalitythatrequiresrootaccess.
•EnableSSH:TurnontouseSSHservice.
Account:Enterauniqueaccountname.
Newpassword:Enterapasswordfortheaccount.Passwordsmustbe1to64characterslong.OnlyASCIIprintablecharacters
(code32to126)areallowedinthepassword,forexample,letters,numbers,punctuation,andsomesymbols.
Repeatpassword:Enterthesamepasswordagain.
Comment:Enteracomment(optional).
Thecontextmenucontains:
pdateSSHaccount:Edittheaccountproperties.
DeleteSSHaccount:Deletetheaccount.Youcan’tdeletetherootaccount.
Storage
Onboardstorage
RAID
•Free:Theamountoffreediskspace.
•Status:Ifthediskismountedornot.
•Filesystem:Thelesystemthatisusedbythedisk.
•Encrypted:Ifthediskisencryptedornot.
•Temperature:Thecurrenttemperatureofthehardware.
•Overallheathtest:Theresultaftercheckingthehealthofthedisk.
•RAIDlevel:TheRAIDlevelusedforthestorage.SupportedRAIDlevelsare0,1,5,10.
•RAIDstatus:TheRAIDstatusofthestorage.PossiblevaluesareOnline,Degraded,Syncing,andFailed.
Tools
Note
Whenyourunthefollowingtools,makesuretowaituntiltheoperationisdonebeforeclosingthepage.
•Check:Checkthestoragedeviceforerrorsandtriestorepairitautomatically.
•Repair:Repairthestoragedevice.Activerecordingswillpauseduringtherepair.Repairingastoragedevicemay
resultinlostdata.
•Format:Eraseallrecordingsandformatthestoragedevice.Choosealesystem.
•Encrypt:Encryptdatathatisstored.Alllesonthestoragedevicewillbeerased.
•Decrypt:Decryptdatathatisstored.Alllesonthestoragedevicewillbeerased.
19

AXISS3016Recorder
Tewebinterface
•Changepassword:Changethepasswordforthediskencryption.Changingthepassworddoesn'tdisruptongoing
recordings.
•ChangeRAIDlevel:ChangetheRAIDlevelforthestorage.
•setool:Clicktoruntheselectedtool.
Harddrivestatus:Clicktoviewtheharddrivestatus,capacity,andserialnumber.
Writeprotect:Turnonwriteprotectiontoprotectthestoragedevicefrombeingoverwritten.
Logs
Reportsandlogs
Reports
•Viewthedeviceserverreport:Viewinformationabouttheproductstatusinapop-upwindow.TheAccessLogis
automaticallyincludedintheServerReport.
•Downloadthedeviceserverreport:Itcreatesa.ziplethatcontainsacompleteserverreporttextleinUTF–8
format,aswellasasnapshotofthecurrentliveviewimage.Alwaysincludetheserverreport.ziplewhenyou
contactsupport.
•Downloadthecrashreport:Downloadanarchivewithdetailedinformationabouttheserver'sstatus.Thecrashreport
containsinformationthatisintheserverreportaswellasdetaileddebuginformation.Thisreportmightcontain
sensitiveinformationsuchasnetworktraces.Itcantakeseveralminutestogeneratethereport.
Logs
•Viewthesystemlog:Clicktoshowinformationaboutsystemeventssuchasdevicestartup,warnings,andcritical
messages.
•Viewtheaccesslog:Clicktoshowallfailedattemptstoaccessthedevice,forexample,whenawronglogin
passwordisused.
Networktrace
Important
Anetworktracelemightcontainsensitiveinformation,forexamplecerticatesorpasswords.
Anetworktracelecanhelpyoutroubleshootproblemsbyrecordingactivityonthenetwork.
Tracetime:Selectthedurationofthetraceinsecondsorminutes,andclickDownload.
Remotesystemlog
Syslogisastandardformessagelogging.Itallowsseparationofthesoftwarethatgeneratesmessages,thesystemthatstoresthem,
andthesoftwarethatreportsandanalyzesthem.Eachmessageislabeledwithafacilitycode,whichindicatesthesoftware
typegeneratingthemessage,andassignedaseveritylevel.
Server:Clicktoaddanewserver.
Host:EnterthehostnameorIPaddressoftheserver.
Format:Selectwhichsyslogmessageformattouse.
•Axis
•RFC3164
•RFC5424
Protocol:Selecttheprotocolandporttouse:
•UDP(Defaultportis514)
•TCP(Defaultportis601)
•TLS(Defaultportis6514)
20