It's important to note that using HTTPS with a valid SSL/TLS certificate can indeed enhance the security of communication data when accessing an encoder or any other web service. By creating a self-signed certificate or uploading a signed certificate from a trusted certificate authority, you can establish secure HTTP connections, providing encryption and authentication to ensure the confidentiality and integrity of data.
Utilizing HTTPS can protect user information and enhance device security, especially when sensitive data is being transmitted. It's a crucial security measure that provides reliable and stable safeguards for communication, making it significantly more difficult for unauthorized parties to intercept or tamper with the data being exchanged.
Install Self-Created Certificate
1.1 Go to Setting->Network->HTTPS->Check the checkbox of Enable
1.2 Click "Create Certificate" and enter below information:
1.3 Click "Confirm"->"Install Certificate" and then it'll show as below:
1.5 Open File or Double Click the downloaded file "ca.crt"
1.6 Click the above "OK"->Click "Install Certificate"->Follow the installation guide->Select "Trusted Root Certification Authorities from the dropdown list"
1.7 Click "Next"->Completing the certificate Import Wizard
1.8 Click "Finish" and it'll pop up the window of Security Warning
1.9 Click "Yes" and it'll pop up the window of The import was successful:
1.10 Go to test whether the encoder can be accessed via HTTPS:
🧙TIPS: When utilizing a self-created certificate that has not been verified and trusted by third parties, it's important to be aware that it may prompt a security risk warning due to the lack of formal validation by a trusted certificate authority. This warning is indicative of the potential security risk associated with using a non-trusted certificate.
Install Signed Certificate
2.1 Double click the signed certificate you obtained from 3rd-parties->Click"Install Certificate"
2.2 Refer to the above step 1.6 ~ 1.9 to complete the installation of certificate in your PC;
2.3 Click "Enable"->Browse Signed Certificate & Keys->Upload Signed Certificate & Keys
2.4 Once completed, just click "Save" to make it valid.
2.5 Then it's necessary to do port mapping and make sure the encoder is linked to the domain bonded with the signed certificate. After that, it should be no problem to access the encoder by https://domain:port instead of the default static IP address.
NOTE: HTTP 80 and RTSP 554 are required to do port mapping
Video Tutorial
Installation of HTTPS Certificate for EXVIST Video Encoder
What's TS stream? A TS stream refers to a transport stream, which is a type of digital video and audio data transmission protocol used for broadcast systems, video streaming, and communication networks. The transport stream format is defined by the ...
What's Port Mapping? Here's how port mapping typically works: External Request: When an external client attempts to connect to a specific service, such as a web server, exvist encoder, or other networked application hosted within a private network, ...
Is your encoder compatible with ONVIF Profile T? Absolutely, our encoder fully supports ONVIF Profile T, ensuring seamless compatibility and functionality with a wide array of devices and systems, offering comprehensive interoperability and efficient ...