User Guide

427-0075-01-12 Revision 140 October 2019 39
This document does not contain any export-controlled information.
Basic Operation and Configuration
Server > Services > TLS Config
The settings on this page enable secure, encrypted communication between clients and the camera;
for example, when your web browser accesses the camera’s web interface.
Note
By default, TLS is disabled. Before enabling it, you need to generate or upload a valid certificate.
You can:
• Use the camera web interface to generate a self-signed certificate.
• Upload a self-signed certificate and a private key.
• Upload a certificate signed by a third-party, a public key, and a private key.
Certificates and keys must be in PEM format. Common file extensions for TLS files in PEM format
are:
For certificate and public key files: *.crt, *.cer, *.cert, *.pem
For private key files: *.key
From the TLS Config page, you can also download certificates and keys previously uploaded to or
generated by the camera. If the certificate saved on the camera is self-signed, you can download the
private and public key files. If the certificate was signed by a third-party CA, you can download the
CA Certificate and the private and public key files.
The camera also supports TLS authentication over the camera’s LAN. For information
about configuring TLS authentication for LAN communication, see
.