Axis D1110 User manual

AXISD1110VideoDecoder4K
Usermanual

AXISD1110VideoDecoder4K
TableofContents
Getstarted................................................3
Findthedeviceonthenetwork....................................3
Openthedevice'swebinterface....................................3
Createanadministratoraccount...................................3
Securepasswords...............................................3
Verifythatnoonehastamperedwiththermware....................4
Webinterfaceoverview..........................................4
Congureyourdevice........................................
Addacamera..................................................
Editacamerasource.............................................
Removeacamera...............................................
Addamediale................................................
Setupasequence...............................................
Setuprulesforevents...........................................6
Audio.........................................................6
Thewebinterface...........................................7
Status........................................................7
Sequences.....................................................8
Audio.........................................................8
Videosources...................................................9
Apps..........................................................9
System........................................................10
Maintenance...................................................23
Learnmore................................................24
Streamingandstorage...........................................24
Cybersecurity...................................................24
Specications..............................................26
Productoverview................................................26
LEDindicators..................................................26
SDcardslot....................................................26
Buttons.......................................................27
Connectors....................................................27
Troubleshooting............................................29
Resettofactorydefaultsettings...................................29
Firmwareoptions...............................................29
Checkthecurrentrmwareversion.................................29
Upgradethermware............................................29
Technicalissues,clues,andsolutions................................30
Performanceconsiderations.......................................31
Contactsupport.................................................31
2

AXISD1110VideoDecoder4K
Getstarted
Getstarted
Findthedeviceonthenetwork
TondAxisdevicesonthenetworkandassignthemIPaddressesinWindows®,useAXISIPUtilityorAXISDeviceManager.Both
applicationsarefreeandcanbedownloadedfromaxis.com/support.
FormoreinformationabouthowtondandassignIPaddresses,gotoHowtoassignanIPaddressandaccessyourdevice.
Browsersupport
Youcanusethedevicewiththefollowingbrowsers:
ChromeTMFirefox®EdgeTMSafari®
Windows®recommendedrecommended
macOS®recommendedrecommended
Linux®recommendedrecommended
Otheroperatingsystems*
*TouseAXISOSwebinterfacewitiOS15oriPadOS15,gotoSettings Settings
Settings> > >Safari Safari Safari> > >Advanced Advanced Advanced> > >Experimental Experimental ExperimentalFeatures Features Featuresanddisable
NSURLSessionWebsocket.
Openthedevice'swebinterace
1.OpenabrowserandtypetheIPaddressorhostnameoftheAxisdevice.
IfyoudonotknowtheIPaddress,useAXISIPUtilityorAXISDeviceManagertondthedeviceonthenetwork.
2.Typetheusernameandpassword.Ifyouaccessthedeviceforthersttime,youmustcreateanadministratoraccount.See
Createanadministratoraccountonpage3.
Createanadministratoraccount
Thersttimeyoulogintoyourdevice,youmustcreateanadministratoraccount.
1.Enterausername.
2.Enterapassword.SeeSecurepasswordsonpage3.
3.Re-enterthepassword.
4.ClickAdduser.
Important
Thedevicehasnodefaultaccount.Ifyoulosethepasswordforyouradministratoraccount,youmustresetthedevice.See
Resettofactorydefaultsettingsonpage29.
Securepasswords
Important
Axisdevicessendtheinitiallysetpasswordincleartextoverthenetwork.Toprotectyourdeviceaftertherstlogin,set
upasecureandencryptedHTTPSconnectionandthenchangethepassword.
3

AXISD1110VideoDecoder4K
Getstarted
Thedevicepasswordistheprimaryprotectionforyourdataandservices.Axisdevicesdonotimposeapasswordpolicyasthey
maybeusedinvarioustypesofinstallations.
Toprotectyourdatawestronglyrecommendthatyou:
•Useapasswordwithatleast8characters,preferablycreatedbyapasswordgenerator.
•Don’texposethepassword.
•Changethepasswordatarecurringinterval,atleastonceayear.
Veriythatnoonehastamperedwiththermware
TomakesurethatthedevicehasitsoriginalAxisrmware,ortotakefullcontrolofthedeviceafterasecurityattack:
1.Resettofactorydefaultsettings.SeeResettofactorydefaultsettingsonpage29.
Afterthereset,securebootguaranteesthestateofthedevice.
2.Congureandinstallthedevice.
Webinteraceoverview
Thisvideogivesyouanoverviewofthedevice’swebinterface.
Towatchthisvideo,gotothewebversionofthisdocument.
elp.axis.com/?&piaId=70289&section=web-interface-overview
Axisdevicewebinterface
4

AXISD1110VideoDecoder4K
Configureourdevice
Configureourdevice
Addacamera
1.GotoVideosources>Camerasources.
2.ClickAddcamerasource:
-Toaddapredenedcamerafromalist,selectetworkdiscovery.
-Toaddacameramanually,selectManual.
-ForAxiscameras:entername,IPaddress,streamingprotocol,port,camerausernameandpassword.
-Forthird-partycameras:entername,IPaddress,camerausernameandpassword.
3.ClickAdd.
Editacamerasource
Afteryou’veaddedacamera,youcaneditthesettingsfromtheEditview.
1.GotoVideosources>Camerasources.
2.Selectthecamerasourceandclick.
3.ClickEditanddoyourchanges.
4.ClickSave.
Removeacamera
1.GotoVideosources>Camerasources.
2.Selectthecamerasourceandclick.
3.ClickDeleteandconrm.
Addamediale
1.GotoVideosources>Mediasources.
2.ClickAddmediasource.
3.Uploadthemedialetothedeviceandselectthelocationtoputit.
4.ClickAdd.
Setupasequence
1.GotoSequences>Sequences.
5

AXISD1110VideoDecoder4K
Configureourdevice
2.ClickAddsequence.
3.Enteranameofthenewsequence.
4.Clickandselectthelayoutfortheview(1x1,2x2,3x3).
.Intheviewwindow,Clicktoselectcamerasourceormediaforthissegment.
6.SelectCameraorMediaandselectasourcefromthelist.
7.ClickAddandcontinueaddingsourcesuntiltheviewwindowisfull.
8.Toaddmoreviewwindowstothesequence,click.
9.ClickSave.
10.Clicktoplaythesequence.
Setuprulesorevents
Youcancreaterulestomakeyourdeviceperformanactionwhencertaineventsoccur.Aruleconsistsofconditionsandactions.
Theconditionscanbeusedtotriggertheactions.Forexample,thedevicecanstartarecordingorsendanemailwhenitdetects
motion,orshowanoverlaytextwhilethedeviceisrecording.
Tolearnmore,checkoutourguideGetstartedwitrulesforevents.
Triggeranaction
1.GotoSystem>Eventsandaddarule.Theruledeneswhenthedevicewillperformcertainactions.Youcanset
uprulesasscheduled,recurring,ormanuallytriggered.
2.Enteraame.
3.SelecttheConditionthatmustbemettotriggertheaction.Ifyouspecifymorethanoneconditionfortherule,allofthe
conditionsmustbemettotriggertheaction.
4.SelectwhichActionthedeviceshouldperformwhentheconditionsaremet.
Note
Ifyoumakechangestoanactiverule,therulemustbeturnedonagainforthechangestotakeeffect.
Audio
Audioles
Thedevicedoesn’tsupportaudio-onlyles.
6

AXISD1110VideoDecoder4K
Thewebinterface
Thewebinterface
Toreachthedevice’swebinterface,typethedevice’sIPaddressinawebbrowser.
Note
Supportforthefeaturesandsettingsdescribedinthissectionvariesbetweendevices.Thisiconindicatesthat
thefeatureorsettingisonlyavailableinsomedevices.
Showorhidethemainmenu.
Accessthereleasenotes.
Accesstheproducthelp.
Changethelanguage.
Setlightthemeordarktheme.
Theusermenucontains:
•Informationabouttheuserwhoisloggedin.
•Changeuser:Logoutthecurrentuserandloginanewuser.
•Logout:Logoutthecurrentuser.
Thecontextmenucontains:
•Analyticsdata:Accepttosharenon-personalbrowserdata.
•Feedback:Shareanyfeedbacktohelpusimproveyouruserexperience.
•Legal:Viewinformationaboutcookiesandlicenses.
•About:Viewdeviceinformation,includingrmwareversionandserialnumber.
•Legacydeviceinterface:Changethedevice’swebinterfacetothelegacyversion.
Status
Deviceinfo
Showsthedeviceinformation,includingrmwareversionandserialnumber.
Upgradermware:Upgradethermwareonyourdevice.TakesyoutotheMaintenancepagewhereyoucandoarmware
upgrade.
Timesyncstatus
ShowsNTPsynchronizationinformation,includingifthedeviceisinsyncwithanNTPserverandthetimeremaininguntil
thenextsync.
TPsettings:ViewandupdatetheNTPsettings.TakesyoutotheDateandtimepagewhereyoucanchangetheNTPsettings.
Security
7

AXISD1110VideoDecoder4K
Thewebinterface
Showswhatkindofaccesstothedevicethatisactive,andwhatencryptionprotocolsareinuse.Recommendationstothesettings
arebasedontheAXISOSHardeningGuide.
Hardeningguide:LinktoAXISOSHardeningguidewhereyoucanlearnmoreaboutcybersecurityonAxisdevicesandbest
practices.
Connectedclients
Showsthenumberofconnectionsandconnectedclients.
Viewdetails:Viewandupdatethelistoftheconnectedclients.ThelistshowsIPaddress,protocol,port,andPID/Process
ofeachclient.
Sequences
Monitor
Showsinformationaboutthesequence.
Sequences
Important
Toavoidproblemswithmulti-streamplaybacks,followtherecommendationsinthewebinterface.
Addsequence:Clicktoaddasequence.
ame:Enteranameforthesequence.
:Clicktoselecthowmanysourcesyouwanttodisplay.
:Clicktoaddonemore.
:Clicktoplaythesequence.
Thecontextmenucontains:
Editsequence
Deletesequence
Audio
Devicesettings
Audioout:Turnonoroffaudiofromtheaudiooutconnector.
8

AXISD1110VideoDecoder4K
Thewebinterface
Videosources
Camerasources
Addavideosource:Clicktoaddanewvideosource.
•etworkdiscovery:SearchforanIPaddressmanuallyorselectanAxisdevicefromthelist.
-Streamingprotocol:Selectwhichprotocoltouse
-Port:Entertheportnumber.
-4isthedefaultvalueforRTSPT
-80isthedefaultvalueforRTSPoverHTTP
-443isthedefaultvalueforRTSPoverHTTPS
-Username:Entertheusernameforthedevice.
-Password:Enterthepasswordforthedevice.
•Manual:Addadevicemanually.
-ame:Enterthevideosource’sname.
-IPaddress:Enterthedevice’sIPaddress.
-Username:Entertheusernameforthedevice.
-Password:Enterthepasswordforthedevice.
Thecontextmenucontains:
Editvideosource:Editthepropertiesofthevideosource.
Deletevideosource:Deletethevideosource.
Mediasources
Addamediasource:Clicktoaddanewmediasource.
•Uploadordraganddropamediale.Youcanuse.mp4,.mkv,.jpegor.pngles.
•Uploadlocation:Selectthelocationfromthedrop-downlist.
Apps
Addapp:Installanewapp.
Findmoreapps:Findmoreappstoinstall.YouwillbetakentoanoverviewpageofAxisapps.
Allowunsignedapps:Turnontoallowinstallationofunsignedapps.
Allowroot-privilegedapps:Turnontoallowappswithrootprivilegesfullaccesstothedevice.
Note
Thedevice’sperformancemightbeaffectedifyourunseveralappsatthesametime.
Usetheswitchnexttotheappnametostartorstoptheapp.
Open:Accesstheapp’ssettings.Theavailablesettingsdependontheapplication.Someapplicationsdon’thaveanysettings.
Thecontextmenucancontainoneormoreofthefollowingoptions:
•Open-sourcelicense:Viewinformationaboutopen-sourcelicensesusedintheapp.
9

AXISD1110VideoDecoder4K
Thewebinterface
•Applog:Viewalogoftheappevents.Thelogishelpfulwhenyoucontactsupport.
•Activatelicensewithakey:Iftheapprequiresalicense,youneedtoactivateit.Usethisoptionifyourdevice
doesn’thaveinternetaccess.
Ifyoudon’thavealicensekey,gotoaxis.com/products/analytics.YouneedalicensecodeandtheAxisproductserial
numbertogeneratealicensekey.
•Activatelicenseautomatically:Iftheapprequiresalicense,youneedtoactivateit.Usethisoptionifyourdevicehas
internetaccess.Youneedalicensecodetoactivatethelicense.
•Deactivatethelicense:Deactivatethelicensetoreplaceitwithanotherlicense,forexample,whenyouchangefroma
triallicensetoafulllicense.Ifyoudeactivatethelicense,youalsoremoveitfromthedevice.
•Settings:Conguretheparameters.
•Delete:Deletetheapppermanentlyfromthedevice.Ifyoudon’tdeactivatethelicenserst,itremainsactive.
System
Timeandlocation
Dateandtime
Thetimeformatdependsonthewebbrowser’slanguagesettings.
Note
Werecommendyousynchronizethedevice’sdateandtimewithanNTPserver.
Synchronization:Selectanoptionforthedevice’sdateandtimesynchronization.
•Automaticdateandtime(manualTSKEservers):SynchronizewiththesecureNTPkeyestablishmentservers
connectedtotheDHCPserver.
-ManualTSKEservers:EntertheIPaddressofoneortwoNTPservers.WhenyouusetwoNTPservers,
thedevicesynchronizesandadaptsitstimebasedoninputfromboth.
•Automaticdateandtime(TPserversusingDHCP):SynchronizewiththeNTPserversconnectedtotheDHCPserver.
-FallbackTPservers:EntertheIPaddressofoneortwofallbackservers.
•Automaticdateandtime(manualTPservers):SynchronizewithNTPserversofyourchoice.
-ManualTPservers:EntertheIPaddressofoneortwoNTPservers.WhenyouusetwoNTPservers,the
devicesynchronizesandadaptsitstimebasedoninputfromboth.
•Customdateandtime:Manuallysetthedateandtime.ClickGetfromsystemtofetchthedateandtimesettings
oncefromyourcomputerormobiledevice.
Timezone:Selectwhichtimezonetouse.Timewillautomaticallyadjusttodaylightsavingtimeandstandardtime.
Note
Thesystemusesthedateandtimesettingsinallrecordings,logs,andsystemsettings.
Network
IPv4
AssignIPv4automatically:SelecttoletthenetworkrouterassignanIPaddresstothedeviceautomatically.Werecommend
automaticIP(DHCP)formostnetworks.
IPaddress:EnterauniqueIPaddressforthedevice.StaticIPaddressescanbeassignedatrandomwithinisolatednetworks,
providedthateachaddressisunique.Toavoidconicts,werecommendyoucontactyournetworkadministratorbeforeyou
assignastaticIPaddress.
Subnetmask:Enterthesubnetmasktodenewhataddressesareinsidethelocalareanetwork.Anyaddressoutsidethelocal
areanetworkgoesthroughtherouter.
Router:EntertheIPaddressofthedefaultrouter(gateway)usedtoconnectdevicesthatareattachedtodifferentnetworksand
networksegments.
10

AXISD1110VideoDecoder4K
Thewebinterface
FallbacktostaticIPaddressifDHCPisn’tavailable:SelectifyouwanttoaddastaticIPaddresstouseasfallbackifDHCP
isunavailableandcan’tassignanIPaddressautomatically.
IPv6
AssignIPv6automatically:SelecttoturnonIPv6andtoletthenetworkrouterassignanIPaddresstothedeviceautomatically.
Hostname
Assignhostnameautomatically:Selecttoletthenetworkrouterassignahostnametothedeviceautomatically.
Hostname:Enterthehostnamemanuallytouseasanalternativewayofaccessingthedevice.Theserverreportandsystemlog
usethehostname.AllowedcharactersareA–Z,a–z,0–9and-.
DSservers
AssignDSautomatically:SelecttolettheDHCPserverassignsearchdomainsandDNSserveraddressestothedevice
automatically.WerecommendautomaticDNS(DHCP)formostnetworks.
Searchdomains:Whenyouuseahostnamethatisnotfullyqualied,clickAddsearchdomainandenteradomaininwhichto
searchforthehostnamethedeviceuses.
DSservers:ClickAddDSserverandentertheIPaddressoftheDNSserver.ThisprovidesthetranslationofhostnamestoIP
addressesonyournetwork.
HTTPandHTTPS
HTTPSisaprotocolthatprovidesencryptionforpagerequestsfromusersandforthepagesreturnedbythewebserver.Theencrypted
exchangeofinformationisgovernedbytheuseofanHTTPScerticate,whichguaranteestheauthenticityoftheserver.
TouseHTTPSonthedevice,youmustinstallanHTTPScerticate.GotoSystem>Securitytocreateandinstallcerticates.
Allowaccessthrough:SelectifauserisallowedtoconnecttothedevicethroughtheHTTP,HTTPS,orbothHTTPandHTTPS
protocols.
Note
IfyouviewencryptedwebpagesthroughHTTPS,youmightexperienceadropinperformance,especiallywhenyou
requestapageforthersttime.
HTTPport:EntertheHTTPporttouse.Thedeviceallowsport80oranyportintherange1024-63.Ifyouareloggedinasan
administrator,youcanalsoenteranyportintherange1-1023.Ifyouuseaportinthisrange,yougetawarning.
HTTPSport:EntertheHTTPSporttouse.Thedeviceallowsport443oranyportintherange1024-63.Ifyouareloggedinas
anadministrator,youcanalsoenteranyportintherange1-1023.Ifyouuseaportinthisrange,yougetawarning.
Certicate:SelectacerticatetoenableHTTPSforthedevice.
etworkdiscoveryprotocols
Bonjour®:Turnontoallowautomaticdiscoveryonthenetwork.
Bonjourname:Enterafriendlynametobevisibleonthenetwork.ThedefaultnameisthedevicenameandMACaddress.
UPnP®:Turnontoallowautomaticdiscoveryonthenetwork.
UPnPname:Enterafriendlynametobevisibleonthenetwork.ThedefaultnameisthedevicenameandMACaddress.
WS-Discovery:Turnontoallowautomaticdiscoveryonthenetwork.
11

AXISD1110VideoDecoder4K
Thewebinterface
One-clickcloudconnection
One-clickcloudconnection(O3C)togetherwithanO3Cserviceprovideseasyandsecureinternetaccesstoliveandrecordedvideo
fromanylocation.Formoreinformation,seeaxis.com/end-to-end-solutions/osted-services.
AllowO3C:
•One-click:Thisisthedefaultsetting.PressandholdthecontrolbuttononthedevicetoconnecttoanO3Cservice
overtheinternet.YouneedtoregisterthedevicewiththeO3Cservicewithin24hoursafteryoupressthecontrol
button.Otherwise,thedevicedisconnectsfromtheO3Cservice.Onceyouregisterthedevice,Alwaysisenabledand
thedevicestaysconnectedtotheO3Cservice.
•Always:ThedeviceconstantlyattemptstoconnecttoanO3Cserviceovertheinternet.Onceyouregisterthedevice,
itstaysconnectedtotheO3Cservice.Usethisoptionifthecontrolbuttononthedeviceisoutofreach.
•o:DisablestheO3Cservice.
Proxysettings:Ifneeded,entertheproxysettingstoconnecttotheproxyserver.
Host:Entertheproxyserver’saddress.
Port:Entertheportnumberusedforaccess.
LoginandPassword:Ifneeded,enterusernameandpasswordfortheproxyserver.
Authenticationmethod:
•Basic:ThismethodisthemostcompatibleauthenticationschemeforHTTP.It’slesssecurethantheDigestmethod
becauseitsendstheusernameandpasswordunencryptedtotheserver.
•Digest:Thismethodismoresecurebecauseitalwaystransfersthepasswordencryptedacrossthenetwork.
•Auto:Thisoptionletsthedeviceselecttheauthenticationmethoddependingonthesupportedmethods.Itprioritizes
theDigestmethodovertheBasicmethod.
Ownerauthenticationkey(OAK):ClickGetkeytofetchtheownerauthenticationkey.Thisisonlypossibleifthedeviceis
connectedtotheinternetwithoutarewallorproxy.
SMP
TheSimpleNetworkManagementProtocol(SNMP)allowsremotemanagementofnetworkdevices.
SMP:SelecttheversionofSNMPtouse.
•v1andv2c:
-Readcommunity:Enterthecommunitynamethathasread-onlyaccesstoallsupportedSNMPobjects.The
defaultvalueispublic.
-Writecommunity:EnterthecommunitynamethathasreadorwriteaccesstoallsupportedSNMPobjects
(exceptread-onlyobjects).Thedefaultvalueiswrite.
-Activatetraps:Turnontoactivatetrapreporting.Thedeviceusestrapstosendmessagesforimportant
eventsorstatuschangestoamanagementsystem.Inthewebinterface,youcansetuptrapsforSNMPv1
andv2c.TrapsareautomaticallyturnedoffifyouchangetoSNMPv3orturnoffSNMP.IfyouuseSNMPv3,
youcansetuptrapsthroughtheSNMPv3managementapplication.
-Trapaddress:EntertheIPaddressorhostnameofthemanagementserver.
-Trapcommunity:Enterthecommunitytousewhenthedevicesendsatrapmessagetothemanagement
system.
-Traps:
-Coldstart:Sendsatrapmessagewhenthedevicestarts.
-Warmstart:SendsatrapmessagewhenyouchangeanSNMPsetting.
-Linkup:Sendsatrapmessagewhenalinkchangesfromdowntoup.
-Authenticationfailed:Sendsatrapmessagewhenanauthenticationattemptfails.
Note
AllAxisVideoMIBtrapsareenabledwhenyouturnonSNMPv1andv2ctraps.Formoreinformation,see
AXISOSPortal>SNMP.
•v3:SNMPv3isamoresecureversion,whichprovidesencryptionandsecurepasswords.TouseSNMPv3,we
recommendyoutoactivateHTTPS,asthepasswordisthensentthroughHTTPS.Thisalsopreventsunauthorized
12

AXISD1110VideoDecoder4K
Thewebinterface
parties’accesstounencryptedSNMPv1andv2ctraps.IfyouuseSNMPv3,youcansetuptrapsthroughtheSNMPv3
managementapplication.
-Passwordfortheaccount“initial”:EntertheSNMPpasswordfortheaccountnamed“initial”.Althoughthe
passwordcanbesentwithoutactivatingHTTPS,wedon’trecommendit.TheSNMPv3passwordcanonly
besetonce,andpreferablyonlywhenHTTPSisenabled.Oncethepasswordisset,thepasswordeldisno
longerdisplayed.Tosetthepasswordagain,youmustresetthedevicetofactorydefaultsettings.
Security
Certicates
Certicatesareusedtoauthenticatedevicesonanetwork.Thedevicesupportstwotypesofcerticates:
•Client/servercerticates
Aclient/servercerticatevalidatesthedevice’sidentity,andcanbeself-signedorissuedbyaCerticateAuthority(CA).
Aself-signedcerticateofferslimitedprotectionandcanbeusedbeforeaCA-issuedcerticatehasbeenobtained.
•CAcerticates
YoucanuseaCAcerticatetoauthenticateapeercerticate,forexampletovalidatetheidentityofanauthentication
serverwhenthedeviceconnectstoanetworkprotectedbyIEEE802.1X.Thedevicehasseveralpre-installedCA
certicates.
Theseformatsaresupported:
•Certicateformats:.PEM,.CER,and.PFX
•Privatekeyformats:PKCS#1andPKCS#12
Important
Ifyouresetthedevicetofactorydefault,allcerticatesaredeleted.Anypre-installedCAcerticatesarereinstalled.
Filterthecerticatesinthelist.
Addcerticate:Clicktoaddacerticate.
Thecontextmenucontains:
•Certicateinformation:Viewaninstalledcerticate’sproperties.
•Deletecerticate:Deletethecerticate.
•Createcerticatesigningrequest:Createacerticatesigningrequesttosendtoaregistrationauthoritytoapply
foradigitalidentitycerticate.
Securekeystore:
•Secureelement(CCEAL6+):Selecttousesecureelementforsecurekeystore.
•TrustedPlatformModule2.0(CCEAL4+,FIPS140-2Level2):SelecttouseTPM2.0forsecurekeystore.
IEEE802.1x
13

AXISD1110VideoDecoder4K
Thewebinterface
IEEE802.1xisanIEEEstandardforport-basednetworkadmissioncontrolprovidingsecureauthenticationofwiredandwireless
networkdevices.IEEE802.1xisbasedonEAP(ExtensibleAuthenticationProtocol).
ToaccessanetworkprotectedbyIEEE802.1x,networkdevicesmustauthenticatethemselves.Theauthenticationisperformedby
anauthenticationserver,typicallyaRADIUSserver(forexample,FreeRADIUSandMicrosoftInternetAuthenticationServer).
Certicates
WhenconguredwithoutaCAcerticate,servercerticatevalidationisdisabledandthedevicetriestoauthenticateitself
regardlessofwhatnetworkitisconnectedto.
Whenusingacerticate,inAxis'implementation,thedeviceandtheauthenticationserverauthenticatethemselveswithdigital
certicatesusingEAP-TLS(ExtensibleAuthenticationProtocol-TransportLayerSecurity).
Toallowthedevicetoaccessanetworkprotectedthroughcerticates,youmustinstallasignedclientcerticateonthedevice.
Clientcerticate:SelectaclientcerticatetouseIEEE802.1x.Theauthenticationserverusesthecerticatetovalidatethe
client’sidentity.
CAcerticate:SelectCAcerticatestovalidatetheauthenticationserver’sidentity.Whennocerticateisselected,thedevice
triestoauthenticateitselfregardlessofwhatnetworkitisconnectedto.
EAPidentity:Entertheuseridentityassociatedwiththeclientcerticate.
EAPOLversion:SelecttheEAPOLversionthatisusedinthenetworkswitch.
UseIEEE802.1x:SelecttousetheIEEE802.1xprotocol.
Preventbrute-forceattacks
Blocking:Turnontoblockbrute-forceattacks.Abrute-forceattackusestrial-and-errortoguesslogininfoorencryptionkeys.
Blockingperiod:Enterthenumberofsecondstoblockabrute-forceattack.
Blockingconditions:Enterthenumberofauthenticationfailuresallowedpersecondbeforetheblockstarts.Youcansetthe
numberoffailuresallowedbothonpagelevelanddevicelevel.
IPaddresslter
Uselter:SelecttolterwhichIPaddressesareallowedtoaccessthedevice.
Policy:ChoosewhethertoAlloworDenyaccessforcertainIPaddresses.
Addresses:EntertheIPnumbersthatareeitherallowedordeniedaccesstothedevice.YoucanalsousetheCIDRformat.
Custom-signedrmwarecerticate
ToinstalltestrmwareorothercustomrmwarefromAxisonthedevice,youneedacustom-signedrmwarecerticate.The
certicateveriesthatthermwareisapprovedbyboththedeviceownerandAxis.Thermwarecanonlyrunonaspecic
devicewhichisidentiedbyitsuniqueserialnumberandchipID.OnlyAxiscancreatecustom-signedrmwarecerticates,
sinceAxisholdsthekeytosignthem.
Install:Clicktoinstallthecerticate.Youneedtoinstallthecerticatebeforeyouinstallthermware.
Accounts
Accounts
14

AXISD1110VideoDecoder4K
Thewebinterface
Addaccount:Clicktoaddanewaccount.Youcanaddupto100accounts.
Account:Enterauniqueaccountname.
ewpassword:Enterapasswordfortheaccount.Passwordsmustbe1to64characterslong.OnlyASCIIprintablecharacters
(code32to126)areallowedinthepassword,forexample,letters,numbers,punctuation,andsomesymbols.
Repeatpassword:Enterthesamepasswordagain.
Privileges:
•Administrator:Hasfullaccesstoallsettings.Administratorscanalsoadd,update,andremoveotheraccounts.
•Operator:Hasaccesstoallsettingsexcept:
-AllSystemsettings.
-Addingapps.
•Viewer:Hasaccessto:
-Watchandtakesnapshotsofavideostream.
-Watchandexportrecordings.
-Pan,tilt,andzoom;withPTZuseraccess.
Thecontextmenucontains:
Updateaccount:Edittheaccountproperties.
Deleteaccount:Deletetheaccount.Youcan’tdeletetherootaccount.
Anonymousaccess
Allowanonymousviewing:Turnontoallowanyoneaccessthedeviceasaviewerwithoutlogginginwithanaccount.
AllowanonymousPTZoperating:Turnontoallowanonymoususerstopan,tilt,andzoomtheimage.
Events
Rules
Aruledenestheconditionsthattriggerstheproducttoperformanaction.Thelistshowsallthecurrentlyconguredrulesin
theproduct.
Note
Youcancreateupto26actionrules.
Addarule:Createarule.
ame:Enteranamefortherule.
Waitbetweenactions:Entertheminimumtime(hh:mm:ss)thatmustpassbetweenruleactivations.Itisusefuliftheruleis
activatedby,forexample,day-nightmodeconditions,toavoidthatsmalllightchangesduringsunriseandsunsetactivate
therulerepeatedly.
Condition:Selectaconditionfromthelist.Aconditionmustbemetforthedevicetoperformanaction.Ifmultiple
conditionsaredened,allofthemmustbemettotriggertheaction.Forinformationaboutspecicconditions,see
Getstartedwitrulesforevents.
Usethisconditionasatrigger:Selecttomakethisrstconditionfunctiononlyasastartingtrigger.Itmeansthatoncetherule
isactivated,itremainsactiveforaslongasalltheotherconditionsaremet,nomatterthestateoftherstcondition.Ifyoudon’t
selectthisoption,therulewillsimplybeactivewheneveralltheconditionsaremet.
Invertthiscondition:Selectifyouwanttheconditiontobetheoppositeofyourselection.
15

AXISD1110VideoDecoder4K
Thewebinterface
Addacondition:Clicktoaddanadditionalcondition.
Action:Selectanactionfromthelistandenteritsrequiredinformation.Forinformationaboutspecicactions,see
Getstartedwitrulesforevents.
Recipients
Youcansetupyourdevicetonotifyrecipientsabouteventsorsendles.Thelistshowsalltherecipientscurrentlyconguredinthe
product,alongwithinformationabouttheirconguration.
Note
Youcancreateupto20recipients.
Addarecipient:Clicktoaddarecipient.
ame:Enteranamefortherecipient.
Type:Selectfromthelist:
•FTP
-Host:Entertheserver'sIPaddressorhostname.Ifyouenterahostname,makesurethataDNSserveris
speciedunderSystem>etwork>IPv4andIPv6.
-Port:EntertheportnumberusedbytheFTPserver.Thedefaultis21.
-Folder:Enterthepathtothedirectorywhereyouwanttostoreles.Ifthisdirectorydoesn’talreadyexist
ontheFTPserver,youwillgetanerrormessagewhenuploadingles.
-Username:Entertheusernameforthelogin.
-Password:Enterthepasswordforthelogin.
-Usetemporarylename:Selecttouploadleswithtemporary,automaticallygeneratedlenames.The
lesgetrenamedtothedesirednameswhentheuploadcompletes.Iftheuploadisaborted/interrupted,
youdon’tgetanycorruptles.However,youprobablystillgetthetemporaryles.Thiswayyouknow
thatalllesthathavethedesirednamearecorrect.
-UsepassiveFTP:Undernormalcircumstances,theproductsimplyrequeststhetargetFTPservertoopenthe
dataconnection.ThedeviceactivelyinitiatesboththeFTPcontrolanddataconnectionstothetargetserver.
ThisisnormallyneededifthereisarewallbetweenthedeviceandthetargetFTPserver.
•HTTP
-URL:EnterthenetworkaddresstotheHTTPserverandthescriptthatwillhandletherequest.Forexample,
http://192.168.24.10/cgi-bin/notify.cgi.
-Username:Entertheusernameforthelogin.
-Password:Enterthepasswordforthelogin.
-Proxy:TurnonandentertherequiredinformationifaproxyservermustbepassedtoconnecttotheHTTP
server.
•HTTPS
-URL:EnterthenetworkaddresstotheHTTPSserverandthescriptthatwillhandletherequest.Forexample,
https://192.168.24.10/cgi-bin/notify.cgi.
-Validateservercerticate:SelecttovalidatethecerticatethatwascreatedbyHTTPSserver.
-Username:Entertheusernameforthelogin.
-Password:Enterthepasswordforthelogin.
-Proxy:TurnonandentertherequiredinformationifaproxyservermustbepassedtoconnecttotheHTTPS
server.
•etworkstorage
YoucanaddnetworkstoragesuchasNAS(network-attachedstorage)anduseitasarecipienttostoreles.Theles
arestoredintheMatroska(MKV)leformat.
-Host:EntertheIPaddressorhostnameforthenetworkstorage.
-Share:Enterthenameoftheshareonthehost.
-Folder:Enterthepathtothedirectorywhereyouwanttostoreles.
-Username:Entertheusernameforthelogin.
-Password:Enterthepasswordforthelogin.
•SFTP
16

AXISD1110VideoDecoder4K
Thewebinterface
-Host:Entertheserver'sIPaddressorhostname.Ifyouenterahostname,makesurethataDNSserveris
speciedunderSystem>etwork>IPv4andIPv6.
-Port:EntertheportnumberusedbytheSFTPserver.Thedefaultis22.
-Folder:Enterthepathtothedirectorywhereyouwanttostoreles.Ifthisdirectorydoesn’talreadyexiston
theSFTPserver,youwillgetanerrormessagewhenuploadingles.
-Username:Entertheusernameforthelogin.
-Password:Enterthepasswordforthelogin.
-SSHhostpublickeytype(MD5):Enterthengerprintoftheremotehost’spublickey(a32-digit
hexadecimalstring).TheSFTPclientsupportsSFTPserversusingSSH-2withRSA,DSA,ECDSA,andED219
hostkeytypes.RSAisthepreferredmethodduringnegotiation,followedbyECDSA,ED219,andDSA.Make
suretoentertherightMDhostkeythatisusedbyyourSFTPserver.WhiletheAxisdevicesupportsboth
MDandSHA-26hashkeys,werecommendusingSHA-26duetostrongersecurityoverMD.Formore
informationonhowtocongureanSFTPserverwithanAxisdevice,gototheAXISOSPortal.
-SSHhostpublickeytype(SHA256):Enterthengerprintoftheremotehost’spublickey(a43-digitBase64
encodedstring).TheSFTPclientsupportsSFTPserversusingSSH-2withRSA,DSA,ECDSA,andED219host
keytypes.RSAisthepreferredmethodduringnegotiation,followedbyECDSA,ED219,andDSA.Make
suretoentertherightMDhostkeythatisusedbyyourSFTPserver.WhiletheAxisdevicesupportsboth
MDandSHA-26hashkeys,werecommendusingSHA-26duetostrongersecurityoverMD.Formore
informationonhowtocongureanSFTPserverwithanAxisdevice,gototheAXISOSPortal.
-Usetemporarylename:Selecttouploadleswithtemporary,automaticallygeneratedlenames.The
lesgetrenamedtothedesirednameswhentheuploadcompletes.Iftheuploadisabortedorinterrupted,
youdon’tgetanycorruptles.However,youprobablystillgetthetemporaryles.Thisway,youknow
thatalllesthathavethedesirednamearecorrect.
•SIPorVMS:
SIP:SelecttomakeaSIPcall.
VMS:SelecttomakeaVMScall.
-FromSIPaccount:Selectfromthelist.
-ToSIPaddress:EntertheSIPaddress.
-Test:Clicktotestthatyourcallsettingsworks.
•Email
-Sendemailto:Entertheemailaddresstosendemailsto.Toentermultipleaddresses,usecommasto
separatethem.
-Sendemailfrom:Entertheemailaddressofthesendingserver.
-Username:Entertheusernameforthemailserver.Leavethiseldemptyifthemailserverdoesnot
requireauthentication.
-Password:Enterthepasswordforthemailserver.Leavethiseldemptyifthemailserverdoesnotrequire
authentication.
-Emailserver(SMTP):EnterthenameoftheSMTPserver,forexample,smtp.gmail.com,smtp.mail.yahoo.com.
-Port:EntertheportnumberfortheSMTPserver,usingvaluesintherange0-63.Thedefaultvalueis87.
-Encryption:Touseencryption,selecteitherSSLorTLS.
-Validateservercerticate:Ifyouuseencryption,selecttovalidatetheidentityofthedevice.Thecerticate
canbeself-signedorissuedbyaCerticateAuthority(CA).
-POPauthentication:TurnontoenterthenameofthePOPserver,forexample,pop.gmail.com.
Note
Someemailprovidershavesecurityltersthatpreventusersfromreceivingorviewinglargeamountof
attachments,fromreceivingscheduledemailsandsimilar.Checktheemailprovider'ssecuritypolicytoavoid
youremailaccountbeinglockedormissingoutonyourexpectedemails.
•TCP
-Host:Entertheserver'sIPaddressorhostname.Ifyouenterahostname,makesurethataDNSserveris
speciedunderSystem>etwork>IPv4andIPv6.
-Port:Entertheportnumberusedtoaccesstheserver.
Test:Clicktotestthesetup.
Thecontextmenucontains:
Viewrecipient:Clicktoviewalltherecipientdetails.
Copyrecipient:Clicktocopyarecipient.Whenyoucopy,youcanmakechangestothenewrecipient.
17

AXISD1110VideoDecoder4K
Thewebinterface
Deleterecipient:Clicktodeletetherecipientpermanently.
Schedules
Schedulesandpulsescanbeusedasconditionsinrules.Thelistshowsalltheschedulesandpulsescurrentlyconguredinthe
product,alongwithinformationabouttheirconguration.
Addschedule:Clicktocreateascheduleorpulse.
Manualtriggers
Youcanusethemanualtriggertomanuallytriggerarule.Themanualtriggercan,forexample,beusedtovalidateactions
duringproductinstallationandconguration.
MQTT
MQTT(MessageQueuingTelemetryTransport)isastandardmessagingprotocolfortheInternetofThings(IoT).Itwasdesignedfor
simpliedIoTintegrationandisusedinawidevarietyofindustriestoconnectremotedeviceswithasmallcodefootprintand
minimalnetworkbandwidth.TheMQTTclientinAxisdevicermwarecansimplifyintegrationofdataandeventsproducedinthe
devicetosystemswhicharenotvideomanagementsoftware(VMS).
SetupthedeviceasanMQTTclient.MQTTcommunicationisbasedontwoentities,theclientsandthebroker.Theclientscan
sendandreceivemessages.Thebrokerisresponsibleforroutingmessagesbetweenclients.
YoucanlearnmoreaboutMQTTinAXISOSPortal.
ALP
ALPNisaTLS/SSLextensionthatallowsfortheselectionofanapplicationprotocolduringthehandshakephaseoftheconnection
betweentheclientandserver.ThisisusedtoenableMQTTtrafcoverthesameportthatisusedforotherprotocols,suchasHTTP.
Insomecases,theremightnotbeadedicatedportopenforMQTTcommunication.AsolutioninsuchcasesistouseALPNto
negotiatetheuseofMQTTastheapplicationprotocolonastandardport,allowedbytherewalls.
MQTTclient
Connect:TurnonorofftheMQTTclient.
Status:ShowsthecurrentstatusoftheMQTTclient.
Broker
Host:EnterthehostnameorIPaddressoftheMQTTserver.
Protocol:Selectwhichprotocoltouse.
Port:Entertheportnumber.
•1883isthedefaultvalueforMQTToverTCP
•8883isthedefaultvalueforMQTToverSSL
•80isthedefaultvalueforMQTToverWebSocket
•443isthedefaultvalueforMQTToverWebSocketSecure
ALPprotocol:EntertheALPNprotocolnameprovidedbyyourMQTTbrokerprovider.ThisisonlyapplicablewithMQTToverSSL
andMQTToverWebSocketSecure.
Username:Entertheusernamethattheclientwillusetoaccesstheserver.
Password:Enterapasswordfortheusername.
18

AXISD1110VideoDecoder4K
Thewebinterface
ClientID:EnteraclientID.Theclientidentierissenttotheserverwhentheclientconnectstoit.
Cleansession:Controlsthebehavioratconnectionanddisconnectiontime.Whenselected,thestateinformationisdiscarded
atconnectanddisconnect.
Keepaliveinterval:Enablestheclienttodetectwhentheserverisnolongeravailablewithouthavingtowaitforthelong
TCP/IPtimeout.
Timeout:Thetimeintervalinsecondstoallowaconnecttocomplete.Defaultvalue:60
Devicetopicprex:UsedinthedefaultvaluesforthetopicintheconnectmessageandLWTmessageontheMQTTclienttab,
andinthepublicationconditionsontheMQTTpublicationtab.
Reconnectautomatically:Specieswhethertheclientshouldreconnectautomaticallyafteradisconnect.
Connectmessage
Speciesifamessageshouldbesentoutwhenaconnectionisestablished.
Sendmessage:Turnontosendmessages.
Usedefault:Turnofftoenteryourowndefaultmessage.
Topic:Enterthetopicforthedefaultmessage.
Payload:Enterthecontentforthedefaultmessage.
Retain:SelecttokeepthestateofclientonthisTopic
QoS:ChangetheQoSlayerforthepacketow.
LastWillandTestamentmessage
TheLastWillTestament(LWT)letsaclientprovideatestamentalongwithitscredentialswhenconnectingtothebroker.Ifthe
clientdisconnectsungracefullyatsomepointlater(maybebecausehispowersourcedied),itcanletthebrokerdeliveramessage
tootherclients.ThisLWTmessagehasthesameformasanordinarymessageandgetsroutedviathesamemechanics.
Sendmessage:Turnontosendmessages.
Usedefault:Turnofftoenteryourowndefaultmessage.
Topic:Enterthetopicforthedefaultmessage.
Payload:Enterthecontentforthedefaultmessage.
Retain:SelecttokeepthestateofclientonthisTopic
QoS:ChangetheQoSlayerforthepacketow.
MQTTpublication
19

AXISD1110VideoDecoder4K
Thewebinterface
Usedefaulttopicprex:Selecttousethedefaulttopicprex,thatisdenedinthedevicetopicprexintheMQTTclienttab.
Includetopicname:SelecttoincludethetopicthatdescribestheconditionintheMQTTtopic.
Includetopicnamespaces:SelecttoincludeONVIFtopicnamespacesintheMQTTtopic.
Includeserialnumber:Selecttoincludethedevice’sserialnumberintheMQTTpayload.
Addcondition:Clicktoaddacondition.
Retain:DeneswhichMQTTmessagesaresentasretained.
•one:Sendallmessagesasnon-retained.
•Property:Sendonlystatefulmessagesasretained.
•All:Sendbothstatefulandstatelessmessagesasretained.
QoS:SelectthedesiredlevelfortheMQTTpublication.
MQTTsubscriptions
Addsubscription:ClicktoaddanewMQTTsubscription.
Subscriptionlter:EntertheMQTTtopicthatyouwanttosubscribeto.
Usedevicetopicprex:AddthesubscriptionlterasprextotheMQTTtopic.
Subscriptiontype:
•Stateless:SelecttoconvertMQTTmessagesintoastatelessmessage.
•Stateful:SelecttoconvertMQTTmessagesintoacondition.Thepayloadisusedasthestate.
QoS:SelectthedesiredlevelfortheMQTTsubscription.
Storage
Onboardstorage
Important
Riskofdatalossandcorruptedrecordings.DonotremovetheSDcardwhilethedeviceisrunning.UnmounttheSD
cardbeforeyouremoveit.
Unmount:ClicktosafelyremovetheSDcard.
Writeprotect:TurnontostopwritingtotheSDcardandprotectrecordingsfrombeingremoved.Youcan’tformata
write-protectedSDcard.
Autoformat:TurnontoautomaticallyformatanewlyinsertedSDcard.Itformatsthelesystemintoext4.
Ignore:TurnontostopstoringrecordingsontheSDcard.WhenyouignoretheSDcard,thedevicenolongerrecognizesthatthe
cardexists.Thesettingisonlyavailableforadministrators.
Retentiontime:Selecthowlongtokeeprecordings,tolimittheamountofoldrecordings,ortocomplywithregulationsregarding
datastorage.IftheSDcardbecomesfull,oldrecordingsareremovedbeforetheselectedtimeperiodhaspassed.
Tools
•Check:CheckforerrorsontheSDcard.Thisonlyworksfortheext4lesystem.
•Repair:Repairerrorsintheext4lesystem.TorepairanSDcardwiththeVFATlesystem,ejecttheSDcard,insertit
inacomputer,andperformadiskrepair.
20