16.2.5 Configure the HTTPS settings
It is possible to enhance the network security by encrypting the access to cameras using the HTTPS function. Refer to 16.3 How to configure HTTPS settings for how to configure the HTTPS settings.
[CRT key generate]
CRT key (SSL encryption key) used for the HTTPS protocol is generated. To generate the CRT key, click the [Execute] button to display “CRT key generate” dialog box.
[Self-signed Certificate - Generate]
The camera itself generates the security certificate used for the HTTPS protocol. (Self-signed certificate)
To generate the self-signed certificate, click the [Execute] button to display the “Self-signed Certificate - Generate” dialog box.
[Self-signed Certificate - Information]
Displays the information of the self-signed certificate.
When the [Confirm] button is clicked, the registered information of the self-signed certificate will be displayed in the “Self-signed Certificate - Confirm” dialog box.
When the [Delete] button is clicked, the generated self-signed certificate will be deleted.
[CA Certificate - Generate Certificate Signing Request]
When using the security certificate issued by CA (Certificate Authority) as the security certificate used for the HTTPS protocol, the CSR (Certificate Signing Request) will be generated.
To generate the CSR, click the [Execute] button to display the “CA Certificate - Generate Certificate Signing Request” dialog window.
[CA Certificate - CA Certificate install]
Installs the server certificate (security certificate) issued by CA (Certificate Authority) and displays the information of the installed server certificate.
To install the server certificate, click the [Browse...] button to display the [Open] dialog box, and select the file of the server certificate issued by CA, and click the [Execute] button.
If the server certificate is already installed, the file name of the installed server certificate will be displayed.
[CA Certificate - Information]
Displays the information of the server certificate.
When the [Confirm] button is clicked, the registered information of the installed server certificate will be displayed in the “CA Certificate - Confirm” dialog box. If the server certificate is not installed, the content of the generated CSR file will be displayed.
When the [Delete] button is clicked, the installed server certificate will be deleted.
IMPORTANT
•
Before deleting the valid server certificate (security certificate), confirm that there is a backup file on the PC or another media. The backup file will be required when installing the server certificate again.
[Connection]
Select the protocol used to connect the camera.
•
HTTP: Only the HTTP connection is available.
•
HTTPS: Only the HTTPS connection is available.
•
Default: HTTP
[HTTPS port]
Designate the HTTPS port number to be used.
•
Available port number: 1 - 65535
•
Default: 443
The following port numbers are unavailable since they are already in use.
20, 21, 23, 25, 42, 53, 67, 68, 69, 80, 110, 123, 161, 162, 554, 995, 10669, 10670, 59000-61000
Note
•
After changing the connection setting, access the camera again by after waiting a while according to the changed setting (“http://IP address of the camera” or “https://IP address of the camera”).
•
When using the self-signed certificate:
If the camera is accessed using the HTTPS protocol for the first time, the warning window will be displayed. In this case, follow the instructions of the wizard to install the self-signed (security) certificate. (→16.4.1 Install the security certificate)
•
When using the server certificate:
In advance, install the root certificate and intermediate certificate on the browser in use. Follow the instructions of CA for how to obtain and install these certificates.
•
When the camera is accessed using the HTTPS protocol, the refresh interval and frame rate of images may be lower.
•
When the camera is accessed using the HTTPS protocol, it may take time to display images.
•
When the camera is accessed using the HTTPS protocol, the images may be distorted or audio may be interrupted.
•
The maximum number of concurrent access user varies depending on the maximum image size and transmission format.