Canon network camera VBM640VE User Manual

Setting Page
4
121
Certificate creation, administrative sett ings and encrypted communication settings.
Certificates
Create an SSL/TLS certificate.
[Create Self-Signed Certificate]
Enter the following items and click [Exe c] to create a self-signed certificate.
Follow the displayed message and reboot. The certif icate created will take effect after rebooting.
Note
Creating a certificate takes time, so it is recommended  that you stop video transmission and upload processes.
[Certificate Status]
If no...

122
Certificate Management
Manage the SSL/TLS certificate.
[Generate Certificate Signing Request]
Click [Exec] to create server private key and generate a certificate signing request.
Once processed, the certificate signing re quest will appear in a separate window.
Note
Generating a certificate signing request takes time, so it is recommended that y ou stop video transmission and upload processes .
[Display Certificate Signing Request]
Click [Exec] to view the details of the certificate signing...

Setting Page
4
123
[Restore]
Installs the certificates and private key from backup.
Click [Browse] to specify the backup file, then click [Exec]. This can only be performed via SSL communications.
The restored certificate will take effect after rebooting.
Encrypted Communications
Set encrypted communications.
[SSL Communications]
Select this to enable or disable SSL communications.
The setting will take effect after rebooting.
However, if no certificate is installe d, SSL communications cannot be used....

124
Settings for 802.1X authentication and authentication status display, and for certificate administration.
802.1X Authentication
Display the 802.1X authentication enable/disable control and status.
[802.1X Authentication]
Select this to enable or  disable 802.1X authentication.
[Authentication  Status]
Display the status of 802.1X aut hentication. There are three types of status: [Authenticated],  [Unauthenticated], and [Stop].
Authentication Method
Set the authentication method us ed for 802.1X...

Setting Page
4
125
[Client Private Key  Status]
If no client private key is installed, [Not Installed] is disp layed. If a client private key is installed, [Installed] is 
displayed.
This is displayed only when [Authent ication Method] is set to [EAP-TLS].
Certificate Management
This is displayed only when [Authentication Method]  is set to [EAP-TLS], [EAP-TTLS], or [EAP-PEAP].
[Install CA Certificate]
Installs a CA certificate.
Specify the certificate file to be inst alled using [Browse] and click...

126
Settings for using IPsec.
Note
If IPsec is used, video transmission performance drops.
IPsec
[IPsec] 
Select key settings for using IPsec.
Auto Key Exchange Settings
[IPsec SA Encryption Algorithm]
Select the IPsec SA encryption algorithm.
The specified algorithm will be checked for an app licable encryption algorithm starting from the left.
[IPsec  SA Authentication Algorithm]
Select the IPsec SA authentication algorithm.
The specified algorithm will be checked for an applicab le authentication...

Setting Page
4
127
[ISAKMP  SA Authentication Algorithm]
Select the SA authentication algorithm for  use with auto key exchange protocol IKE.
[DH Group]
Select the key generation information that w ill be used in the DH algorithm for key exchange via auto key exchange protocol 
IKE.
[I SAKMP  SA Validity Period (min)]
Enter the duration of validity for ISAKMP SA.
IPsec Set 1 to 5
IP security can be specified through auto key exchange  or manual setting with up to five communicating devices.
Auto Key...

128
Manual
[IPsec  Set]
Set whether IPv4 or IPv6 will use or will not use IPsec sets.
[IPsec Mode]
Select the IPsec mode.
[Destination IPv4 Address], [Destination IPv6 Address]
Enter the IP address of the connection destination.
[ Source IPv4 Address], [ Source IPv6 Address]
Enter the IP address of the source.
[ Security Protocol]
Select the IPsec protocol.
If [ESP] is selected, enter only t he setting items relating to ESP.
If [AH] is selected, enter only th e setting items relating to AH.
If [ESP and...

Setting Page
4
129
If [ESP] is used alone, [No Authentication] cannot be selected.
[SA E SP Encryption Key (outbound)]
Enter the SA encryption key for outbound.
If [AES], [3DES] or [DES] was  selected in [SA ESP Encryption  Algorithm], set a 128-bit, 192-bit or 64-bit  hexadecimal 
number, respectively. This item need  not be set if [NULL] was selected.
[ SA E SP Authentication Key (outbound)]
Enter the SA authentication key for outbound.
If [HMAC_SHA1_96] or [HMAC_MD5_96] was selected in [SA ESP...

130
Settings for recording video to a memory card inserted in the camera. You can also see the status of the memory card.
The content on this page is common with [Video Record] > [Memo ry Card] (P. 101). Settings configured in any page will be 
reflected in the other pages.
Note
 The following memory cards can be used. – SD memory card, SDHC memory card, SDXC memory card 
– microSD memory card, microSDHC memory card, microSDXC memory card 
 For inserting and removing the memory card, please refer to...