Security Overview

This section describes ways in which you can improve security when using Video Management Server.

Media Management and Analysis Platform (MMAP)

MMAP is a separate component and not part of VMS, but it is important to secure MMAP because it provides an interface to VMS functionality.

You can configure MMAP so that it only accepts encrypted connections over HTTPS. You can also configure MMAP so that it authenticates clients, by requiring a certificate that has been signed by trusted authority. To do this, configure the JBoss Enterprise Application Server. For more information about configuring JBoss, refer to the JBoss documentation.

ACI Requests

MMAP communicates with VMS through the VMS ACI port.

You can configure VMS so that it only accepts ACI requests that are encrypted with SSL/TLS. For information about how to configure VMS, see Configure SSL for ACI Requests. When you enable SSL/TLS on the VMS ACI port, any requests that are sent over HTTP are rejected.

You can also configure VMS to require a certificate, that has been signed by a trusted authority, before it communicates with a peer.

If you are using MMAP and you configure VMS to accept only encrypted connections, you must configure MMAP to send requests over HTTPS. If you configure VMS to require a certificate from peers, you must also obtain a suitable certificate and configure MMAP appropriately. For information about configuring MMAP, refer to the Media Management and Analysis Platform Installation Guide.

RTSP Server

You can configure VMS so that media players such as the Micro Focus Media Player must authenticate before they are permitted to stream video from the VMS RTSP server. VMS supports standard BASIC or RTSP Digest authentication, but Micro Focus recommends that you use RTSP Digest. This is configured in the [RTSP] section of the VMS configuration file. Set the AuthenticationType parameter to the type of authentication that you want to use. For example, to use RTSP Digest authentication, set AuthenticationType=DIGEST:

[RTSP]
AuthenticationType=DIGEST
NOTE:

To enable authentication for RTSP requests, your video sources must have an associated StorageUsername and StoragePassword.

If you enable authentication and your video sources do not have a StorageUsername and StoragePassword, then VMS refuses RTSP requests until the video sources are reconfigured.

If your system includes MMAP, you must configure video sources, and update the StorageUsername and StoragePassword, through MMAP.


_FT_HTML5_bannerTitle.htm