Panasonic Network Camera Wv Sfv481 Operating Instructions

							•When the [Delete] button is clicked, the generated self-signed certificate (security certificate) will
be deleted.
• When “HTTPS” is selected for “Connection”, it is impossible to delete the self-signed certificate.
15.3.3  Generation of CSR (Certificate Signing Request)
IMPORTANT •If the CRT key is not generated, it is impossible to generate the CSR.
• Before generating the CSR file, configure the following settings on [Internet Options] of the web browser
in advance. Click [ Internet Options...] under [ Tools] of the menu bar of Internet Explorer, and then click
the [Security] tab.
– Register the camera for [Trusted Sites].
– Click the [Custom level...] button to open the [Security Settings] window, and check the [Enable]
radio button of [File Download] under [Downloads].
– Click the [Custom level...] button to open the [Security Settings] window, and check the [Enable]
radio button of [Automatic prompting for file downloads] under [Downloads].
1. Click the [Execute] button of “CA Certificate - Generate Certificate Signing Request”.
→ The “CA Certificate - Generate Certificate Signing Request” dialog box will be displayed.
2.Enter the information of the certificate to be generated.
ItemDescriptionAvailable number of characters[Common Name]Enter the camera address or host name.64 characters[Country]Enter the country name.2 characters (Country code)[State]Enter the state name.128 characters[Locality]Enter the locality name.128 characters[Organization]Enter the organization name.64 characters[Organizational
Unit]Enter the unit name of the organization.64 charactersOperating Instructions181
15 Configuring the network settings [Network]   
						

							ItemDescriptionAvailable number of characters[CRT key]Displays the key size and generation time & date
of the current key.
Note
•To use the server certificate, follow the requests from the CA about the information to be entered.
• The available characters for [Common Name], [State], [Locality], [Organization], [Organizational
Unit] are 0-9, A-Z, a-z and the following marks.
- . _ , + / ( )
3. Click the [OK] button after entering the items.
→ The [Save As] dialog box will be displayed.
4. Enter a file name for the CSR in the [Save As] dialog box to save on the PC.
→ The saved CSR file will be applied to the CA.
IMPORTANT
•The server certificate will be issued for the set of the generated CSR and CRT key. If the CRT key is
re-generated or updated after applying to the CA, the issued server certificate will be invalidated.
Note
•This camera generates the CSR file in the PEM format.
15.3.4  Installation of the server certificate
IMPORTANT •If the CSR file is not generated, it is impossible to install the server certificate  (security certificate). For
the installation, the server certificate issued by CA is required.
1. Click the [Browse...] button of “CA Certificate - CA Certificate install”.
→ The [Open] dialog box will be displayed.
2. Select the server certification file and click the [Open] button. Then, click the [Execute] button.
→ The server certification will be installed.
Note
•The host name registered in the installed server certificate will be displayed on “CA Certificate -
Information”. Depending on the status of the server certificate, the following are displayed.
IndicationDescriptionInvalidThe server certification is not installed.Common name of the server certificateThe server certificate has already been installed
and validated.ExpiredThe server certification has already expired.182Operating Instructions
15 Configuring the network settings [Network] 
						

							•When the [Confirm] button is clicked, the registered information of the installed server certificate
will be displayed in the “CA Certificate - Confirm” dialog box. (Only “Organizational Unit” will be
displayed with an asterisk (*).)
• When the [Delete] button is clicked, the installed server certificate will be deleted.
• When “HTTPS” is selected for “Connection”, it is impossible to delete the server certificate.
• To change (or update) the server certificate, perform step 1 and 2.
IMPORTANT
•Before deleting the valid server certificate (security certificate), confirm that there is a backup file on
the PC or another media. The backup file will be required when installing the server certificate again.
• When the server certificate has expired, the HTTPS function will become unavailable. When the
camera is restarted, the connection protocol will be changed to HTTP. Update the server certificate
before it expires.
• The expiration date of the server certificate can be checked by double-clicking the server certification
file issued by CA.
15.3.5  Configuration of the connection protocol 1.Select “HTTP” or “HTTPS” for “Connection” to determine the protocol used to access the camera.
• HTTP:  Only the HTTP connection is available.
• HTTPS:  Only the HTTPS connection is available.
2. Designate the HTTPS port number to be used for “HTTPS port”.
• Available port number:  1 - 65535
• Default:  443
The following port numbers are unavailable since they are already in use.
20, 21, 23, 25, 42, 53, 67, 68, 69, 80, 110, 123, 161, 162, 554, 995, 10669, 10670, 59000 - 61000
3. Click the [Set] button.
→ It will become possible to access to the cameras using the HTTPS protocol. ( ®page 7, page 27,
page 29)
Note
•When the connection setting is changed, after waiting for a while, access the camera again with either
“http://IP address of the camera” or “https://IP address of the camera” depending on the changed
setting.
• When using the self-signed certificate:
Operating Instructions183
15 Configuring the network settings [Network]   
						

							If the camera is accessed using the HTTPS protocol for the first time, the warning window will be
displayed. In this case, follow the instructions of the wizard to install the self -signed  (security) certificate.
( ® page 184)
• When using the server certificate:
In advance, install the root certificate and intermediate certificate on the browser in use. Follow the
instructions of CA for how to obtain and install these certificates.
• When the camera is accessed using the HTTPS protocol, the refresh interval and frame rate of images
may be lower.
• When the camera is accessed using the HTTPS protocol, it may take time to display images.
• When the camera is accessed using the HTTPS protocol, the images may be distorted or audio may
be interrupted.
• The maximum number of concurrent access user varies depending on the maximum image size and
transmission format.
15.4  Access the camera using the HTTPS protocol 1.Start up the web browser.
2. Enter the IP address of the camera in the address box of the browser.
• Example of entry:  https://192.168.0.10/
IMPORTANT
•When the HTTPS port number is changed from “443”, enter “https://IP address of the camera + :
(colon) + port number” in the address box of the browser.
( Example:  https://192.168.0.11:61443)
• When the camera is in a local network, configure the proxy server setting of the web browser  (under
[ Internet Options...] under [ Tools] of the menu bar) to bypass the proxy server for the local address.
3. Press the [Enter] key on the keyboard.
→ The “Live” page will be displayed.
When the security alert window is displayed, install the security certificate. ( ®page 185)
When “On” is selected for “User auth.”, the authentication window will be displayed before displaying
live images for the user name and password entries.
IMPORTANT
•When the camera is accessed using the HTTPS protocol, the refresh interval and frame rate of
images may be lower.
15.4.1  Install the security certificate When the security certificate of the camera to access is not installed on the PC, the security alert window will
be displayed each time the camera is accessed using the HTTPS protocol. To have the security alert window
not displayed, it is necessary to install the security certificate in the following procedure. If the certificate is not
installed, the alert window will be displayed each time the camera is accessed.
Note
•The security certificate is installed on the PC with the information registered for “Common Name”.
Therefore, the information registered for  “Common Name ” must be same as the address or host name
for the camera access. If the certificate is not the same, the security alert window will be displayed
each time the camera is accessed.
184Operating Instructions
15 Configuring the network settings [Network] 
						

							•When the address or host name of the camera is changed, the security alert window will be displayed
each time the camera is accessed even if the security certificate is installed. Install the security
certificate again.
• When the camera access is open to the Internet, enter the address name or host name to access via
the Internet for “Common Name”. In this case, the security alert window will be displayed each time
the camera is locally accessed, even if the security certificate is installed.
• When the security certificate is properly installed, a key icon is displayed in the address box of the web
browser that has accessed the camera.
• When using Internet Explorer 10 or Internet Explorer 11, note that some of the displayed windows may
differ from the following descriptions.
1. Access the camera using the HTTPS protocol.
2. When the security alert window is displayed, click “Continue to this website (not recommended).”
→The “Live” page will be displayed. If an authentication window is displayed, enter the user name and
password.
Note
•If this window is displayed when accessing a device other than the camera or a website, a security
problem may have occurred. In this case, check the system status.
Operating Instructions185
15 Configuring the network settings [Network]   
						

							3.Click “Certificate Error” over the URL, and click “View certificates”.186Operating Instructions
15 Configuring the network settings [Network]   
						

							4.Click “Install Certificate...”.
Note
•If [Install Certificate...] is not displayed, close Internet Explorer once, and select [Run as
Administrator ] to launch Internet Explorer again. Click [ Start] ®  [All Programs]  ® right click [ Internet
Explorer]  ® click [Run as Administrator].
• When using Windows 8 or Windows 8.1, right click [iexplore] under “C:\Program Files\Internet
Explorer” and select [Run as Administrator].
Operating Instructions187
15 Configuring the network settings [Network]   
						

							5.Click “Next” displayed on “Certificate Import Wizard”.
Note
•When using Internet Explorer 10 or Internet Explorer 11, select “Store Location”, and then click
“Next”.
188Operating Instructions
15 Configuring the network settings [Network]   
						

							6.Select “Place all certificates in the following store”, and click “Browse...”.
7.Select “Trusted Root Certificate Authorities”, and click “OK”.
Operating Instructions189
15 Configuring the network settings [Network]     
						

							8.Click “Next”.
9.Click “Finish”.
190Operating Instructions
15 Configuring the network settings [Network]