Security: Video

This article informs about improvements in firmware handling and new security mechanisms that help our customers to increase security related to firmware updates and IP camera protection.

The following procedure describes how to restore DIVAR IP 5000 ALL-IN-ONE to the factory default image.   Step-by-step guide   1. Start the unit and press F7 during the BIOS power-on-selftest. The Recovery menu is displayed.   2. Select one of the following: – Initial factory setup: restores to factory default image and deletes all data on the HDDs. or – System Recovery (back to Factory Defaults): restores to factory default image; data on the HDDs will not be deleted.   Note: While the System Recovery option doesn't delete video footage stored on the data HDDs, it still replaces the complete OS (operating system) partition (including VMS settings) with a default configuration. In order to access existing video footage after recovery, the VMS configuration needs to be exported before System Recovery and re-imported afterwards.   Notice! Do not turn off the unit during the process. This will damage the Recovery media.   3. The unit starts from the Recovery media. If the setup is successful, press OK to restart the system.   4. Windows performs the initial setup of the operating system. The unit restarts after Windows has completed the setup. 5. After the restart of the unit, the factory settings are installed. 6. After the system has reboot, the next step is to change the BVRAdmin password. The default one is WSS4Bosch.

Similar to VRM eXport Wizard 2.0,  encrypted and unencrypted VRM recordings can be exported (VRM block export) from any video surveillance system based on Bosch Video Recording Manager (VRM) and exported recordings can be converted to mp4-files.    VRM eXport Wizard 2.10 introduces a new look and feel of the graphical user interface and some UX changes. In general, the VRM eXport wizard is a software tool that allows you to export video directly from the VRM and to convert exported video data to mp4. You can find the VRM eXport wizard setup file in the VRM Master Installer or in the bonus directory of the BVMS zip file. Exports made with the VRM eXport Wizard 2.10 can be open in BVMS (Viewer) 9.0 or newer. In this document we describe how to use the VRM eXport Wizard for either export of video data and conversion of the exorted video data to mp4. With the VRM eXport Wizard 2.10 encrypted and unencrypted VRM recordings can be exported (VRM block export) from any video surveillance system based on Bosch Video Recording Manager (VRM) and exported recordings can be converted to mp4-files. Therefore, the VRM eXport Wizard 2.10 offers - similiar to the previous version - the following two options, compare also Figure 1: Export Video Recording Manger recordings of cameras Convert already exported data to MP4 files

With the VRM eXport Wizard 2.0 encrypted and unencrypted VRM recordings can be exported (VRM block export) from any video surveillance system based on Bosch Video Recording Manager (VRM) and exported recordings can be converted to mp4-files. Therefore, the VRM eXport Wizard 2.0 offers the following two options, compare also Figure 1: Export VRM recordings of cameras Convert already exported data to mp4-file

The default Community Strings for Bosch cameras is - public. To change it, please follow the steps below.

This article provides you with information related to the Windows Firewall, how to access, configure and adjust it.

If BVMS and VRM are installed on the same machine, it is needed to change the TCP Port of the VRM Monitor.

This article explains how BVMS can be configured to connect to an LDAP (or Microsoft Active Directory) and use it as a base for user authentication.   BVMS is able to function in a (Windows) domain-controlled environment. The BVMS (and related) services run under the local system account. If another (domain-controlled) account is used to run these services, their permissions level should be the same as the local system account. It is recommended to add the Windows server to the domain first (as a domain member), before installing the BVMS software. The BVMS configuration is independent from the domain configuration, however, crucial changes in the domain could break the connection between the BVMS system and the LDAP authentication mechanism.

The Divar AN 3000/5000 features the ability to ping an IP address, thus allowing the technician to verify that the workstation that is to connect to the Divar can be seen on the network. Please note that this only checks the connection from the DIVAR to the Workstation. Ping operates by sending Internet Control Message Protocol (ICMP) echo request packets to the target host and waiting for an ICMP echo reply. The program reports errors, packet loss, and a statistical summary of the results.

This article will explain how to set-up the RAID quickly in order to start the "re-imaging" process from the Recovery DVD (one at DIVAR IP 6000 R2 - or two DVDs at DIVAR IP 7000 R2) enclose to each DIVAR IP 7000 R2 or DIVAR IP 6000 R2 delivery. 

Sometimes it is preferable to have a different “user mode” during the day then in the night. Our cameras by default have the option to switch the user mode e.g. triggered by the camera D/N switch over. But also other triggers can be chosen. Below an example how to setup the “user mode” switching triggered by the D/N switch over.

Perhaps you are wondering how to set the maximum retention time on a Divar Network? Some of our customers asked about this option. Well, in DIVAR Network and Hybrid there is not retention time. But you can set the automatically deleting time, that is more or less the same.   Step-by-step guide:   Open one Browser and type your device IP address Login with the administrator account Go to Settings > Storage > Recording Fill in the box with the desired automatic deletion time   Another option is to make this change directly in the local interface of the unit.

Short intro and related topics: This article will review the settings required to configure Windows as a NTP time server. Note: If you are running VRM and have the Time Server enabled, you must disable the Time Server before performing the following. Article requirements: Windows Server 2016/ Windows 10

Find below Gmail SMTP settings which you have to set in your EMAIL screen of DIVAR Menu. SMTP Server address: smtp.gmail.com Username: Your Gmail e-mail adress Password: Your Gmail password Port (TLS😞 587 Port (SSL😞 465 TLS / SSL required: Yes TLS : Transport Layer Security         SSL: Secure Sockets Layer What happens if you do not select either one? If neither SSL nor TLS is used , then the communication line can easily become a party line for eavesdroppers, all data transmitted between DIVAR and e-mail account for anyone to see.

In Cloud-based Services, different 'Actions' can be configured for automatic processing as well as manual action for the operators (Alarm Agents). There are 2 different options how an action is processed: An 'Automatic Action' is processed automatically when the related Service Scenario is performed. An 'Intervention Action' is executed manually by an operator from the Cloud-based Service Operator Interface. This note shows available actions in Cloud-based Services and provides a step by step instruction to configure these actions.   Step-by-step guide   1. Send e-mail "Send e-mail" sends an e-mail notification to the configured recipient(s). The action can be used as manual action for the operators (Intervention Action). The content of the alarm email can be configured to the customer's needs.   To configure a "Send e-mail" action, perform the following steps: 1. Open Cloud-based Services Configuration website (/config), log in as Integrator or Config Agent. 2. Enter the related Account. 3. Click tab 'Actions'. 4. Click '+' button to add an action. 5. Give the action a descriptive name and select 'Email'. 6. Type recipients, CC's, mail subject and message. Use the pull down to enter environment variables to the e-mail text. 7. Click 'Create'. 8. Add the action to a Service Scenario for processing.   2. Execute PTZ Command "Execute PTZ Command" starts an auxiliary command on a Pan-Tilt-Zoom (PTZ) camera. The action can be used for automatic processing (Automatic Action) as well as manual action for the operators (Intervention Action). Note the available auxiliary commands in the camera’s manual. To configure an "Execute PTZ Command" action, perform the following steps: 1. Open Cloud-based Services Configuration website (/config), log in as Integrator or Config Agent. 2. Enter the related Account. 3. Click tab 'Actions'. 4. Click '+' button to add an action. 5. Give the action a descriptive name and select 'Execute PTZ Command'. 6. Select PTZ camera, select auxiliary command and type the command No. 7. Click 'Create'. 8. Add the action to a Service Scenario for processing   3. Go to PTZ Preposition "Go to PTZ Preposition" moves a Pan-Tilt-Zoom (PTZ) camera to a preposition. The action can be used for automatic processing (Automatic Action) as well as manual action for the operators (Intervention Action). The prepositions (shots) need to be configured via the Device Page upfront. To configure a "Go to PTZ Preposition" action, perform the following steps: 1. Open Cloud-based Services Configuration website (/config), log in as Integrator or Config Agent. 2. Enter the related Account. 3. Click tab 'Actions'. 4. Click '+' button to add an action. 5. Give the action a descriptive name and select 'Go to PTZ preposition'. 6. Select PTZ camera and type the preposition No. 7. Click 'Create'. 8. Add the action to a Service Scenario for processing.   4. Play Audio on Device "Play Audio on Device" replays an audio file directly from the device's loudspeaker. The action is intended to perform standard audio interventions without the need for the operator (alarm agent) to talk. "Play Audio on Device" can be used for automatic processing (Automatic Action) as well as manual action for the operators (Intervention Action). Audio files need to be prepared and installed by CBS development. If you want to use your own audio files, please get in contact with technical support. To configure a "Play Audio on Device" action, perform the following steps: 1. Open Cloud-based Services Configuration website (/config), log in as Integrator or Config Agent. 2. Enter the related Account. 3. Click tab 'Actions'. 4. Click '+' button to add an Action. 5. Give the Action a descriptive name and select 'Play audio on device'. 6. Select the audio device and select the audio file. 7. Click 'Create'. 8. Add the action to a Service Scenario for processing.   5. Switch Relay "Switch Relay" switches a relay of one or more IP devices. The action can be used for automatic processing (Automatic Action) as well as manual action for the operators (Intervention Action). To configure a "Switch Relay" action, perform the following steps: 1. Open Cloud-based Services Configuration website (/config), log in as Integrator or Config Agent. 2. Enter the related Account 3. Click tab 'Actions'. 4. Click '+' button to add an action. 5. Give the action a descriptive name and select 'Relay'. 6. Select activation mode and select one or more relays to switch. 7. Click 'Create'. 8. Add the action to a Service Scenario for processing.   6. Notify Monitoring Center and Log Event Both action types "Notify Monitoring Center" and "Log Event" are obsolete and can not be used in a Service Scenario.  See also: How to add a user to Remote Alert service in Remote Portal?

Related Products: BVMS / MVS / VSDK Overview: On request from development to provide a dump file from MVS system please follow the steps in the solution section.   Step-by-step guide   Reproduce the issue Download the Microsoft debugger procdump (https://technet.microsoft.com/en-us/sysinternals/dd996900.aspx). The procdump tool is also attaced to the article :How To create BVMS memory dump?  When application is crashing, do not click any buttons on the appeared error window that will change the program state. Run the procdump.exe from the directory where you copied the tool with following command line (Start - cmd): procdump.exe –ma <name of the programm exe> <dump file name>.dmp   In the case of MVS you need to do that for all 4 MVS services: - Bosch.MVS.SourceProvider.BVMS.Service.exe - Bosch.MVS.DataStorage.Service.exe - Bosch.MVS.SourceProvider.MobileCamera.Service.exe - Bosch.MVS.Transcoder.Service.exe

The Windows Storage Server operating system of DIVAR IP all-in-one 7000 is installed on a two SSD drives in redundant (mirrored) configuration. Health status of the mirrored OS drives can be monitored using a tool called Virtual RAID on CPU (formerly known as Rapid Storage Technology). Installation and configuration steps are described below. Step-by-step guide   1. Installation: Download the setup from here Copy the content to a USB drive When the BVMS default screen is shown, press CTRL + ALT + DEL Hold down the SHIFT key while clicking Log off Log in as BVRAdmin Transfer the IATA_CD.exe from the USB drive to the BVRAdmin desktop Double click the IATA_CD.exe executable Follow the installation procedure as shown in the screen shots     2. Email notification: Note: The E-mail notification feature is based on SMTP access without authentication. It is strongly suggested to use this functionality only with a dedicated server in the local network, which is specifically configured for this purpose and doesn’t handle any critical data.

This article provides an overview of Operator Client (BVMS 10.0.1) for most used functionality for security operators and incidental users.

This article provides you the way you can set the VIDEOJET decoder 8000/ 7000 (VJD-8000/ VJD-7513) to factory default. Article requirements: VIDEOJET decoder 8000/ 7000 Keyboard monitor