Panasonic Network Camera Wv Sud638 Operating Instructions

							•Available port number:  1 - 65535
• Default:  443
The following port numbers are unavailable since they are already in use.
20, 21, 23, 25, 42, 53, 67, 68, 69, 80, 110, 123, 161, 162, 554, 995, 10669, 10670, 59000-61000
[Pre-installed certificate - Download root certificate]
Click the [ Execute] button to download the root certificate for the pre -installed certificate. By installing the root
certificate to your PC, you can get signature verification for the pre-installed certificate.
[CRT key generate]
CRT key ( SSL encryption key) used for the HTTPS protocol is generated. To generate the CRT key, click the
[Execute] button to display “CRT key generate” dialog box.
[CA Certificate - Generate Certificate Signing Request]
When using the security certificate issued by CA (Certificate Authority) as the security certificate used for the
HTTPS protocol, the CSR (Certificate Signing Request) will be generated.
To generate the CSR, click the [Execute] button to display the “CA Certificate - Generate Certificate Signing
Request” dialog window.
[CA Certificate - CA Certificate install]
Installs the server certificate (security certificate) issued by CA (Certificate Authority) and displays the
information of the installed server certificate.
To install the server certificate, click the [ Browse...] button to display the [ Open] dialog box, and select the file
of the server certificate issued by CA, and click the [Execute] button.
If the server certificate is already installed, the file name of the installed server certificate will be displayed.
[CA Certificate - Information]
Displays the information of the server certificate.
When the [Confirm] button is clicked, the registered information of the installed server certificate will be
displayed in the  “CA Certificate  - Confirm”  dialog box. If the server certificate is not installed, the content of the
generated CSR file will be displayed.
When the [Delete] button is clicked, the installed server certificate will be deleted.
IMPORTANT
•Before deleting the valid server certificate (security certificate), confirm that there is a backup file on
the PC or another media. The backup file will be required when installing the server certificate again.
Note
•After changing the connection setting, access the camera again by after waiting a while according to
the changed setting (“http://IP address of the camera” or “https://IP address of the camera”).
• When using the server certificate:
In advance, install the root certificate and intermediate certificate on the browser in use. Follow the
instructions of CA for how to obtain and install these certificates.
• When the camera is accessed using the HTTPS protocol, the refresh interval and frame rate of images
may be lower.
• When the camera is accessed using the HTTPS protocol, it may take time to display images.
• When the camera is accessed using the HTTPS protocol, the images may be distorted or audio may
be interrupted.
• The maximum number of concurrent access user varies depending on the maximum image size and
transmission format.
Operating Instructions141
12 Configuring the network settings [Network] 
						

							12.2.6  Configure the settings relating to DDNSTo access this camera via the Internet, it is necessary to configure the settings for the DDNS function.
Refer to page 168 for how to configure the settings relating to DDNS.
[Area]
Select the region where the camera is installed.
Japan/Global
Note
•If the camera is used outside of Japan, select “Global”. If the camera is used in Japan, select
“Japan”.
[Service]
Select the DDNS service to determine whether or not to use DDNS.
• Off:  Does not use the DDNS function.
• Viewnetcam.com:  Uses the “Viewnetcam.com” service.
• Dynamic DNS Update : Uses Dynamic DNS Update  (RFC2136 compliant) without the DHCP cooperation.
• Dynamic DNS Update(DHCP):  Uses Dynamic DNS Update (RFC2136 compliant) with the DHCP
cooperation.
• Default:  Off
Note
•When using Dynamic DNS Update  (RFC2136 compliant), refer to the network administrator for whether
or not to cooperate with the DHCP.
12.2.7  Configure the settings relating to SNMP The settings relating to SNMP can be configured on this page. It is possible to check the status of the camera
by connecting to the SNMP manager. When using the SNMP function, contact the network administrator.
142Operating Instructions
12 Configuring the network settings [Network]     
						

							[Community]
Enter the community name to be monitored.
• Available number of characters:  0 - 32 characters
• Default:  None (blank)
IMPORTANT
•When using the SNMP function, it is necessary to enter the community name. When no community
name is entered, the SNMP function will not work.
[System name]
Enter a system name to be used to manage the camera with the SNMP function.
• Available number of characters:  0 - 32 characters
• Default:  None (blank)
[Location]
Enter the name of the location where the camera is installed.
• Available number of characters:  0 - 32 characters
• Default:  None (blank)
[Contact]
Enter the E-mail address or the phone number of the SNMP manager.
• Available number of characters:  0 - 255 characters
• Default:  None (blank)
12.2.8  Configure the Diffserv settings The settings relating to Diffserv can be configured on this page. The Diffserv function can be used to set the
priority of image/audio data sent from routers.
The priority set to this function must match the DSCP value configured to the router.
When using the Diffserv function, contact the network administrator.
[DSCP(0-63)]
Enter the order of priority for packets.
• Available values:  0 - 63
• Default:  0
Operating Instructions143
12 Configuring the network settings [Network]   
						

							12.3  How to configure HTTPS settingsThe settings relating to the HTTPS protocol that can enhance the network security by encrypting the access
to cameras on this page.
HTTPS settings can be configured by either using the certificate pre-installed to the camera, or using a CA
certificate that you obtained by yourself from the CA  (CA: Certification Authority). The settings will be configured
in the following procedure.When using a pre-installed certificate:When using a CA certificate:Generate CSR (Certificate Signing Request)
(® page 147)Apply for the approval and the issue of server
certificate by CA
(® page 147)Install the server certificate
(® page 149)Configure HTTPS connections
(® page 145)When a pre-installed certificate is
selectedWhen a CA certificate isselectedAccess a camera using HTTPSAccess a camera using HTTPSWhen a pre-installed certificate is selected
( ® page 150)When a CA certificate is
selected
( ® page 161)144Operating Instructions
12 Configuring the network settings [Network]            
						

							Configuring the HTTPS connection (®page 145)
Generation of the CRT key (SSL encryption key) ( ®page 146)
Generation of CSR (Certificate Signing Request) ( ®page 147)
Installation of the server certificate ( ®page 149)
Note
•To use the CA certificate, you need to apply for the approval and the issue of server certificate by CA.
12.3.1  Configuration of HTTPS connections 1.Select “HTTPS” to access the camera in [HTTPS – Connection].
2. Select the certificate to be used with HTTPS with [HTTPS – Select certificate].
• When using a pre-installed certificate:  Select “Pre-installed”.
• When using a CA certificate:  Select “CA”.
Note
•“CA”  can only be selected when a CA certificate has been added. Refer to  page 144 for information
on how to add a CA certificate.
3. Designate the HTTPS port number to be used for [HTTPS – HTTPS port].
• Available port number:  1 - 65535
• Default:  443
The following port numbers are unavailable since they are already in use.
20, 21, 23, 25, 42, 53, 67, 68, 69, 80, 110, 123, 161, 162, 554, 995, 10669, 10670, 59000 - 61000
4. Click the [Set] button.
→ It will become possible to access to the cameras using the HTTPS protocol.
Refer to the following for information on methods to access cameras using HTTPS.
• When using a pre-installed certificate:  page 150
• When using a CA certificate:  page 161
• Monitor images on a PC:  page 8
• Monitor images on a cellular phone:  page 18
• Monitor images on a mobile terminal:  page 20
Operating Instructions145
12 Configuring the network settings [Network]A B C D       
						

							Note•When the connection setting is changed, after waiting for a while, access the camera again with either
“http://IP address of the camera” or “https://IP address of the camera” depending on the changed
setting.
• When using the pre-installed certificate:
In advance, install the root certificate of the Pre-installed certificate on the PC in use. Refer to
page 150 for information on the setting procedure.
• When using the CA certificate:
In advance, install the root certificate and intermediate certificate on the PC in use. Follow the
instructions of CA for how to obtain and install these certificates.
• When the camera is accessed using the HTTPS protocol, the refresh interval and frame rate of images
may be lower.
• When the camera is accessed using the HTTPS protocol, it may take time to display images.
• When the camera is accessed using the HTTPS protocol, the images may be distorted or audio may
be interrupted.
• The maximum number of concurrent access user varies depending on the maximum image size and
transmission format.
12.3.2  Generation of the CRT key (SSL encryption key)
IMPORTANT •When the server certificate is valid, it is impossible to generate the CRT key.
• When server certification is used, the available key size varies depending on the CA. Confirm the
available key size in advance.
• To generate the CRT key, it may take about 1 minute when the key size is 1024 bit and about 2 minutes
when the key size is 2048 bit. Do not operate the web browser until the generation of CRT key is
complete. While the CRT key is being generated, the refresh interval and line speed may be lower.
1. Click the [Execute] button of “CRT key generate”.
→ The “CRT key generate” dialog box will be displayed.
2.Select “1024bit” or “2048bit” for the length of the CRT to generate for “CRT key generate” - “RSA key
size”.
Note
•To use the server certificate, follow the requests from the CA about the RSA key size.
146Operating Instructions
12 Configuring the network settings [Network]   
						

							3.Click the [Execute] button.
→ The generation of CRT key will be started. When the generation is finished, the key size and generation
time & date of the generated key will be displayed on “Current CRT key”.
Note
•To change ( or update) the generated CRT key, perform step 1 to 3. The CRT key, server certification
are valid in a set. When the CRT key is changed, it is necessary to re-apply for the server certificate.
• When the CRT key is updated, the log of the previous CRT key is saved. When the [ History] button of
“ Current CRT key ” on the  “CRT key generate ” dialog box is clicked, the  “Previous CRT key ” dialog box
will be displayed, and it is possible to check the key size and generation time & date of the previous
key. When the [Apply ] button is clicked on the  “Previous CRT key” dialog box, it is possible to replace
the current CRT key with the previous one.
12.3.3  Generation of CSR (Certificate Signing Request)
IMPORTANT
•If the CRT key is not generated, it is impossible to generate the CSR.
• Before generating the CSR file, configure the following settings on [Internet Options] of the web browser
in advance. Click [ Internet Options...] under [ Tools] of the menu bar of Internet Explorer, and then click
the [Security] tab.
– Register the camera for [Trusted Sites].
– Click the [Custom level...] button and check the [Enable] radio button of [File Download] under
[Downloads].
– Click the [Custom level...] button and check the [Enable] radio button of [Automatic prompting for
file downloads] under [Downloads].
Operating Instructions147
12 Configuring the network settings [Network]   
						

							1.Click the [Execute] button of “CA Certificate - Generate Certificate Signing Request”.
→ The “CA Certificate - Generate Certificate Signing Request” dialog box will be displayed.
2.Enter the information of the certificate to be generated.
ItemDescriptionAvailable number of characters[Common Name]Enter the camera address or host name.64 characters[Country]Enter the country name.2 characters (Country code)[State]Enter the state name.128 characters[Locality]Enter the locality name.128 characters[Organization]Enter the organization name.64 characters[Organizational
Unit]Enter the unit name of the organization.64 characters[CRT key]Displays the key size and generation time  & date
of the current key.
Note
•To use the server certificate, follow the requests from the CA about the information to be entered.
• The available characters for [Common Name], [State], [Locality], [Organization], [Organizational
Unit] are 0-9, A-Z, a-z and the following marks.
- . _ , + / ( )
3. Click the [OK] button after entering the items.
→ The [Save As] dialog box will be displayed.
4. Enter a file name for the CSR in the [Save As] dialog box to save on the PC.
→ The saved CSR file will be applied to the CA.
IMPORTANT
•The server certificate will be issued for the set of the generated CSR and CRT key. If the CRT key is
re-generated or updated after applying to the CA, the issued server certificate will be invalidated.
148Operating Instructions
12 Configuring the network settings [Network]   
						

							Note•This camera generates the CSR file in the PEM format.
12.3.4  Installation of the server certificate
IMPORTANT •If the CSR file is not generated, it is impossible to install the server certificate  (security certificate). For
the installation, the server certificate issued by CA is required.
1. Click the [Browse...] button of “CA Certificate - CA Certificate install”.
→ The [Open] dialog box will be displayed.
2. Select the server certification file and click the [Open] button. Then, click the [Execute] button.
→ The server certification will be installed.
Note
•The host name registered in the installed server certificate will be displayed on “CA Certificate -
Information”. Depending on the status of the server certificate, the following are displayed.
IndicationDescriptionInvalidThe server certification is not installed.Common name of the server certificateThe server certificate has already been installed
and validated.ExpiredThe server certification has already expired.
• When the [Confirm] button is clicked, the registered information of the installed server certificate
will be displayed in the “CA Certificate - Confirm” dialog box. (Only “Organizational Unit” will be
displayed with an asterisk (*).)
• When the [Delete] button is clicked, the installed server certificate (security certificate) will be
deleted.
• When  “HTTPS”  is selected for  “Connection”, it is impossible to delete the server certificate  (security
certificate).
• To change (or update) the server certificate, perform step 1 and 2.
IMPORTANT
•Before deleting the valid server certificate (security certificate), confirm that there is a backup file on
the PC or another media. The backup file will be required when installing the server certificate again.
Operating Instructions149
12 Configuring the network settings [Network]   
						

							•When the server certificate has expired, the HTTPS function will become unavailable. When the
camera is restarted, the connection protocol will be changed to HTTP. Update the server certificate
before it expires.
• The expiration date of the server certificate can be checked by double-clicking the server certification
file issued by CA.
12.4  Access the camera using the HTTPS protocol
(for pre-installed certificate) When accessing the camera with HTTPS from a browser using the pre-installed certificate, in order to stop a
warning message from being played, you must configure your PC by following the steps below.
Installation of the root certificate
Configuration of the host file
Explanations are based on procedures for Windows 7 using Internet Explorer 11. Procedures for other
operating systems or browsers may differ.
12.4.1  Installation of the root certificate This procedure only needs to be done once for each PC that accesses the camera.
1. Access the camera, and click the [Execute] button for “Pre-installed certificate - Download root
certificate” under “HTTPS” in the [Advanced] tab in the settings menu of the “Network” page. Click
“Open” displayed on the bottom of the browser.
150Operating Instructions
12 Configuring the network settings [Network]