Security: Video

Not all Cisco PoE+ switches are able to power up the UHO-PoE-10 or VSP-UHO-PoE-10 outdoor housing (F.01U.300.502, F.01U.332.052). Bosch has introduced the UHO-PoE-10 in 2014 following the IEEE802.3-2009 standards Cisco claims that the Bosch UHO-PoE-10 at startup for a short moment (around 1 micro second) exceeds maximum current peek allowed by the updated IEEE 802.3-2015 standard, allowing the PSE (Power Source Equipment) to withdraw the power as a protective measure. Due to analogue overcurrent protector components in the Cisco switch it can happen that tolerances may cause variety in behavior over different Cisco switches, even when the same model and setups are used. Currently this behavior is only known on some Cisco models. (reports were seen on C2960X, C3560CX and recently C9200.)  

If one of DIVARs IP 5000 AIO is selected on a user profile, the Operator Client opens the site and works fine. One message is displayed when two or more DIVARs are added into the same Enterprise system.   If you already have a DIP 5000 AIO into your Enterprise system and you want to add additional units but you receive the following message, you can solve this by using the steps below: "Server of configuration database is already in the server list. Remove either the server that is twice in the list or make sure that the configuration database is not cloned between servers."

If you have the option "Extended (security)/configuration mode" active on a VIDEOJET decoder 7000 (VJD-7513) in Configuration Manager, then no video image will be shown and the BOSCH logo will be displayed at the cameo of the monitor output of the decoder. This is as designed in Configuration Manager, and this mode is to give you the opportunity to enable the SSD Encryption and to disable the USB ports. Once you are finished changing the extended security features, you must uncheck the check box and the decoder will go back to normal functioning.

If the administrator account (which was originally created when initial setup wizard was run) has been deleted locally and another new administrator account was created, then it is not possible to create user via web. Only locally is possible, as the application is still looking for the original admin account.   A workaround   here would be to default your Divar Network and follow the setup wizard > this will create the administrator user again and will let you create new users again. Or create the new users locally on your Divar.   Notice! Bosch strongly recommends upgrading to the latest firmware for the best possible  functionality, compatibility, performance and security. Check   http://downloadstore.boschsecurity.com/   regularly to see if there is a new  firmware version available.

The BVMS Logbook database can be moved to another SQL Server. This article describes the steps that are necessary to migrate the database and describes how to confirm if the migration was successful.   BVMS is using Microsoft SQL Server Express to store its logbook. Based on the information provided by Microsoft (Compare SQL Server 2017 editions), SQL Server Express is limited to a 10GB database size. This could be insufficient for larger installations or installations that require a very long logbook retention time. Additionally, some organizations have a dedicated SQL server environment which should be utilized by all applications. The BVMS Logbook database can be moved to another SQL Server. This guide describes the steps that are necessary to migrate the database and describes how to confirm if the migration was successful.

Time is everything: meetings, public transportation, religion, transactions: the whole world is working because the concept of “time” exists. Within a security (or any other) system this is not different: recording schedules, logging, authorizations, encryption keys, timelines, all of these concepts can exist because of time. As a result, time can either make or break a system: problems can appear only due to a time difference of a couple of seconds between two system components. This article  describes how time services can be configured in a BVMS version ≤ 10.1 environment. For BVMS  version ≥ 11.0 please refer to the following article:  Where can you configure NTP server for cameras/encoders in BVMS≥11? Time: what is the challenge? Each device has its own internal clock, which is based on a hardware mechanism. This mechanism acts like a watch: try to put two watches together and synchronize them on the millisecond. A security system consists out of more than two devices, it can consist of thousands of devices. Synchronizing the time of all these devices by hand is a very time consuming task. Additionally, due to small differences in electronic components, devices can have deviations from one another. These deviations cannot be detected by the human eye, but can result in considerable time differences when a device is running for months. Synchronizing time The Network Time Protocol (NTP) was created to solve these challenges. The Network Time Protocol is a network-based protocol for clock synchronization between system components. The protocol utilizes a standard IP network to communicate and can maintain a time difference (considering a local area network) of less than one millisecond between components. The Network Time Protocol is a standard protocol and documented in   RFC 5905. The operation and configuration of the Network Time Protocol are complex: a hierarchical architecture needs to be set-up including several layers of systems which are able to run the Network Time Protocol. To reduce complexity the Simple Network Time Protocol (SNTP) was  created. The Simple Network Time Protocol is mainly used when less accuracy (deviations of 1-2 seconds are acceptable). Windows Time Service The Bosch Video Management System is running on Microsoft Windows Server operating systems. Windows includes an internal time service, which is explained on Microsoft Technet: “The Windows Time service, also known as W32Time, synchronizes the date and time for all computers running in an AD DS domain. Time synchronization is critical for the proper operation of many Windows services and line-of-business applications. The Windows Time service uses the Network Time Protocol (NTP) to synchronize computer clocks on the network so that an accurate clock value, or time stamp, can be assigned to network validation and resource access requests. The service integrates NTP and time providers, making it a reliable and scalable time service for enterprise administrators. The W32Time service is not a full-featured NTP solution that meets time-sensitive application needs and is not supported by Microsoft as such. For more information, see Microsoft Knowledge Base article 939322,Support boundary to configure the Windows Time service for high-accuracy environments   (http://go.microsoft.com/fwlink/?LinkID=179459).” Source:   Windows Time Service Technical Reference - Microsoft Technet The Windows Time service is based on the Simple Network Time Protocol. Summary The Network Time Protocol requires a very complex infrastructure, which impacts the total installation and configuration effort of the system. The Simple Network Time Protocol (also used for the Windows Time Service) reduces the complexity, but at the same time also reduces the accuracy. For most security applications the Simple Network Time Protocol provides sufficient accuracy. Bosch recommends to use the Windows Time service, based on the Simple Network Time Protocol, as basis for time synchronization in a security network. This article provides best-practices on how to configure the Bosch Video Management System and related components in a time synchronization environment based the Windows Time service. Alternatively, the Network Time Protocol can be used whenever it is already existing inside an infrastructure or when event accuracy with a deviation less than one second is required. Due to the complexity of the infrastructure Bosch does not make any recommendations related to the Network Time Protocol.     Step-by-step guide   Management server configuration   A. Operating system configuration This section also applies for the   Video Recording Manager   and   Mobile Video Service   when these are not running on the management server. Microsoft has prepared a lot of documentation related to time configuration Go to the   Microsoft Support: How to configure an authoritative time server in Windows Server   page and scroll down to the section “Configuring the Windows Time service to use an external time source”. Click the download button under the “Here’s an easy fix” section. Figure:   Download the Microsoft Windows Time service configuration utility   The utility will configure external time servers. To select these, browse to   http://pool.ntp.org   and select two servers which are related to the geographical location of the system, for example “de.pool.ntp.org” and “nl.pool.ntp.org”, referring to Germany and the Netherlands. Another (local or external) (S)NTP server can also be chosen.   Start the Microsoft configuration utility and configure it as indicated and shown in the figure below. Administrative access is required to run the utility. Figure:   Pool.ntp.org   locations   Figure:   Windows Time service configuration   Alternatively the configuration can be done from the command-line, using the command shown below. net stop w32time w32tm   /config   /syncfromflags :manual   /manualpeerlist : "nl.pool.ntp.org,   de.pool.ntp.org" net start w32time The configuration can be verified by starting the Windows Command prompt and issuing the command “w32tm /query / status”, as shown in the figure below. Notice the time source, this should point towards the configured servers. Figure:   verifying configuration   It can take up to one minute before the correct time source is displayed. When there is a problem, the configured (S)NTP server can be tested by issuing the “w32tm /stripchart /computer:de.pool.ntp.org”, which should result in the output displayed in the figure below. Figure:   test the (S)NTP service   When an unexpected result is returned, it is recommended to check access to the specific (S)NTP server. A firewall might prevent the communication between the (S)NTP server and the management server.   B. BVMS Management Server configuration BVMS automatically points devices to its own time-server. This can be changed by editing the BvmsCenterlServer.exe.config file, located in C:\Program Files\Bosch\VMS\bin\. Find the key "TimeServerIPAddress" and adjust the value, as shown in the example below (192.168.0.1). <!--   Ip address of the time server for VRM/NVR encoders(defaults to the Central-Server IP if not set) . --> < add   key = "TimeServerIPAddress"   value = "192.168.0.1"   />     C. Workstation configuration The Bosch Video Management System Operator client runs on a Windows workstation. When the workstation and server are part of the same Microsoft Active Directory service domain, no manual time synchronization needs to be configured. Figure:   workstation configuration, "192.168.0.200" needs to be replaced by the IP address or Fully Qualified Domain Name of the management server.   When the Bosch Video Management System workstation and management Server are not joined in a domain, or into the same domain, the workstation(s) need to be manually configured to use the management server as a time server. To achieve this, the description above can be used. Instead of using the   pool.ntp.org   as a server, the management server is now entered.   D. Camera configuration If a camera is connected to a BVMS system the time server will be automatically configured.

This article guides you through the process of installing the BVMS Logbook Health Checker. The Bosch VMS Logbook Health Checker is a tool that is capable of fixing the overflow of the Bosch VMS Logbook database before it occurs.

This article will guide you how to remedy invalid expansion licenses on your Bosch Divar IP 5000 all in one.    Error indication Despite  that the registration of your additional purchased licenses has been completed successfully. The licenses may become invalid  after a  following reboot. This behavior is caused by switching the MAC address of your teaming interface.  

You can find it in the   Configuration Client   > Main window >   Settings   menu >   Remote Access Settings... command >   Show Port Mapping... button >   Port Mapping Table dialog box Port Mapping Table dialog box displays the port mapping for the IP addresses of the configured devices in your BVMS. You can find here the private and public ports that are in use in the BVMS system.   Example:     Used ports: All local ports   that must be open on the computer where the server is installed or on the router/ level 3 switch that is connected to the server   can be found in Help section (F1)   from Configuration Client or you can see some useful examples, Q&A and specific cases in the following Knowledge Base article: Which are the ports that must be open within a LAN for all BVMS components?

No. It is not possible to disable the time synchronization function of BVMS. It is only possible to configure a single time server per BVMS system to be used as time source for the VRM encoders.   You can check the article below, if needed: How to configure time services in a BVMS environment?

Please refer to the following link: https://www.milestonesys.com/community/business-partner-tools/supported-devices/xprotect-corporate-and-xprotect-expert/?StringSearchData=SNC-EM642R   If you have for e.g. a SNC-EM642R camera and you want to find out which device packs you need for your entire solution, follow the steps below:  

The purpose of this article is to provide the step-by-step process for replacing defective drive, rebuild RAID, create new iSCSI target, VHD and LUNs for DIP 7000 R2.

This article informs about improvements in firmware handling and new security mechanisms that help our customers to increase security related to firmware updates and IP camera protection.

Answer It only depends on the version of BVMS you have. If you have BVMS 7.5, certain cameras with a certain FW have been tested and are supported. If you have BVMS 8.0, certain cameras with a certain FW have been tested and are supported. For BVMS versions of 9.0 or lower, only tested cameras must be added, otherwise we cannot support new setup. On DIP 3000 you can only upgrade to BVMS 8.0. The version of Windows installed on it does not support older versions of BVMS, it is not compatible. Recommended to use BVMS 8.0, the largest version supported on that unit. You need to make sure that those cameras are on the list of tested devices of the version you have.   Regarding the ONVIF Compatibility of the cameras, please see the following Bosch Knowledge Base article: https://community.boschsecurity.com/t5/Security-Video/BVMS-ONVIF-Device-compatibility/ta-p/4252

The following procedure describes how to restore DIVAR IP 5000 ALL-IN-ONE to the factory default image.   Step-by-step guide   1. Start the unit and press F7 during the BIOS power-on-selftest. The Recovery menu is displayed.   2. Select one of the following: – Initial factory setup: restores to factory default image and deletes all data on the HDDs. or – System Recovery (back to Factory Defaults): restores to factory default image; data on the HDDs will not be deleted.   Note: While the System Recovery option doesn't delete video footage stored on the data HDDs, it still replaces the complete OS ( operating system ) partition (including VMS settings) with a default configuration. In order to access existing video footage after recovery, the VMS configuration needs to be exported before System Recovery and re-imported afterwards.   Notice! Do not turn off the unit during the process. This will damage the Recovery media.   3. The unit starts from the Recovery media. If the setup is successful, press OK to restart the system.   4. Windows performs the initial setup of the operating system. The unit restarts after Windows has completed the setup. 5. After the restart of the unit, the factory settings are installed. 6. After the system has reboot, the next step is to change the BVRAdmin password. The default one is WSS4Bosch.

  What does mean the clock symbol showed in the Operator Client Logical tree?

Causes   When camera is set to auto track (by web interface) to "auto"-> IVA is detecting an object but camera is not following. Auto tracking works and metadata is displayed only on a stored preposition.   Solution   There was a change introduced starting with FW v.7.70. The new feature is:   i-Track only starts on VCA-Alarm.   You can either program this on presets, e.g a detection field or if you want to have Itrack active regardless of its position, you need to activate "global VCA" and assign task detection area "whole screen" now only activate iTrack "AUXON78" so the eye is in the corner, and your iTrack will always be on sharp   Note: IVA must be active for at least one preset scene in the VCA page on the Settings tab. If IVA is configured for one scene, then all other scenes have Intelligent Tracking enabled by default. If a scene, however, has Motion+ or IVA 5.5 Flow activated, then Intelligent Tracker is disabled for these scenes. Please refer also to the attached document.

The attached documents show the different design options that are available when designing a BVMS system. For BVMS 10.1, we have extended the blueprints with Person Identification, the Access Management System, and updated the Enterprise overview.

In many cases a minimum and maximum retention time needs to be defined in a video surveillance systems due to legal requirements. While the minimum retention time defines the time period for how long video recordings need to be stored, the maximum retention time defines after which period of time the recordings have to be deleted. Thus, the minimum retention time is going to influence the amount of storage needed. The higher the minimum retention time the more storage space is required.

When using the BVMS 9.0 installer on a Windows 10 "October 2018 update" machine (Build 1809) the SNMP services cannot be installed. Microsoft has changed the way the SNMP services are installed in Windows 10 "October 2018 update".