Security: Video

When working with previous versions of BVMS, remote connectivity was cumbersome due to the amount of port mapping that needed to be configured. BVMS 7.5 provides a new method of remote connectivity utilizing Secure Shell (SSH) Tunnelling. SSH Tunnelling constructs an encrypted tunnel established by an SSH protocol/socket connection. This encrypted tunnel can provide transport to both encrypted and un-encrypted traffic. The Bosch SSH implementation also utilizes Omni-Path protocol, which is a high performance low latency communications protocol developed by Intel. Key management The BVMS SSH service generates a private and public key when it is started for the first time. Both keys are saved in an encrypted file. When the BVMS SSH service restarts this file is detected and the private key is read.   Step-by-step guide   1.Configuration   A. Installation There is little to no configuration required for this feature to function. The SSH Service must be installed and running. If deploying a BVMS Pro system, insure the SSH Service is part of the installation process. Recording Appliances that ship with BVMS 7.5 should have the service pre-installed. Check your “Services”. If the service has not been installed, the install package can be run from the BVMS 7.5 downloadable install package. If working with a DIVAR IP Recording Appliance, the appliance “Installer Package” must be used.   B. Port mapping entry The primary configuration step is to configure one (1) port forwarding for the BVMS Central Server to utilize port 5322 for both internal and external connections. This is the only port mapping entry that needs to be made for the entire system. The image below shows a sample configuration.   2. Operation   A. Login with the Operator Client After the basic configuration is done, logging in via Operator Client is very intuitive: From the log menu, select the “Connection” drop down menu, then Select <New…> You will be prompted to enter an IP address or DNS host name. You will also notice a cheat guide below the entry menu that will assist with address entry. Addressing must be in the following format: ssh://IP or servername:5322. In the example we used: ssh://49.49.49.49:5322. After entering a properly formatted address, enter a valid user name and password. SSH users MUST have a password associated with their BVMS account. User accounts without a password cannot log in utilizing an SSH Connection.   B. Verification After connection is established via an SSH Tunnel, all communications between the BVMS Server (192.168.1.19) and a remote client (49.49.49.48) are encrypted. Below is a Wireshark Capture taken from the BVMS Server after a connection is established. C. Changing the SSH port Locate the SSH service configuration file in "C:\Program Files\Bosch\BVMS\bin" Open the configuration file and find the section below. Edit the value of the BvmsSshServicePort (the port should be unused) and restart the system.

This article contains documents attached which describes the installation package for BVMS. Operating system support of the specific BVMS version is listed in the BVMS release notes.

The attached manual provides information for Mobile Video Service (MVS) within Bosch Video Management System. You can find:  - how to configure the router and Internet Information Service (IIS) - how to add MVS to BVMS - user guide - some troubleshooting tips   This document can also be found online here.

This article describes the different components that Bosch Video Management System offers to to establish a connection between Bosch Video Management System and a 3rd party management system. This description helps you in writing your own commands for controlling Bosch VMS from inside your management system.   

 This article shows the keyboard shortcuts that can be used by operators when operating the BVMS system. 

This article will provide a basic explanation and simple examples of the interfacing (scripting, calling functions by external applications) functionality in Bosch Video Management System.

Check this article and have a look at the attached documents which describe the settings you must perform after having installed BIS and BVMS on the different computers.

In many cases a minimum and maximum retention time needs to be defined in a video surveillance systems due to legal requirements. While the minimum retention time defines the time period for how long video recordings need to be stored, the maximum retention time defines after which period of time the recordings have to be deleted. Thus, the minimum retention time is going to influence the amount of storage needed. The higher the minimum retention time the more storage space is required.

In order to quickly offer a technical solution or to provide a professional advice for the next analysis steps, the technical support specialists need to get some general and basic information. Ticket content should always be in English and provided in a well summarized and structured way in order to be able to provide a quick and appropriate feedback. Not following the guideline will impact the processing time of the ticket.

This attached document describes how Bosch Building Technologies handles the life-cycle of the BVMS, BIS, AMS, and APE, and in which state a specific release can reside.

This article contains the LIF fie which will help you to activate the Activation Key from SLMS for BVMS Lite v10.0

This is a step-by-step guide about how to collect BMC logs (RAID & IPMI Event Logs, System, Audit & Video Logs) of DIP AIO 7000 gen4.

This article explains how to  configure the KBD-Universal XF with Virtual Com Port or HID Joystick Mode.

This article explains whether it is possible to change the default email SMTP port on BVMS when using SSL or TLS.

This article explores whether BVMS licenses can be transferred from version 8.0 on DIP 7000 R1 to DIP 7000 R2 for version 9.0.

This article explains why isn't the company displayed in the Remote Portal after accepting the account invitation. If you were invited to join in a Bosch Remote Portal account as an admin, but when logging into the Remote Portal, you can't select the company or it cannot be found under the User Settings > My companies, this means that the invitation could be still in pending.  

This article explains how to use Milestone's Centralized Search with different Bosch IVA Pro packs.

This article explains what to do for factory reset (recovery) of the DIVAR IP units.

Find out from this article the cause and possible solutions for status 4 and status 6 messages occurred on MIC IP FUSION 9000i camera.

This article explains how enabling electronic image stabilization (EIS) on CPP14 cameras affect privacy masks. As soon as the "electronic image stabilization" (EIS) is set to on, the image section changes slightly, which changes the placement of the privacy mask.