Skip to content

Commit c7fc8eb

Browse files
author
Elena Fiocca
committed
Updates
1 parent b41b175 commit c7fc8eb

File tree

2 files changed

+8
-8
lines changed

2 files changed

+8
-8
lines changed

docsource/axisipcamera.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ It is expected that there be one (1) certificate store managed per AXIS network
1616
## Certificate Usage
1717

1818
Every certificate inventoried will have an Entry Parameter called \`Certificate Usage\`.
19-
There are four (4) possible options:
19+
There are five (5) possible options:
2020

2121
* **HTTPS**
2222
* **IEEE802.X**
@@ -31,8 +31,8 @@ There are four (4) possible options:
3131
is presented to the 802.1x radius server for authentication.
3232
3. MQTT
3333
- This certificate usage describes the client certificate used to authenticate the camera to the MQTT broker.
34-
In this scenario, the camera connects to the MQTT broker over SSL and performs a TLS handshake. If a client certificate is provided,
35-
the camera presents this client certificate to the MQTT broker.
34+
In this scenario, the camera connects to the MQTT broker over SSL and performs a TLS handshake.
35+
The camera presents this client certificate to the MQTT broker.
3636
4. Trust
3737
- This certificate usage describes a public certificate issued by a CA used to establish trust.
3838
5. Other

docsource/content.md

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@
33
The AXIS IP Camera Orchestrator extension remotely manages certificates on AXIS IP Network Cameras. This
44
orchestrator extension inventories certificates on the camera's certificate store, and it also supports adding new client-server certificates and adding/removing CA certificates.
55
New client-server certificates are created in the AXIS camera certificate store via On Device Key Generation (ODKG aka Reenrollment).
6-
This means that certificates cannot be directly added to the Axis camera, but instead the keypair is generated on the AXIS device using a keystore and a certificate is issued for that keypair via a CSR submitted to Command for enrollment.
6+
This means that certificates cannot be directly added to the AXIS camera, but instead the keypair is generated on the AXIS device and a certificate is issued for that keypair via a CSR submitted to Command for enrollment.
77
This workflow is completely automated in the AXIS IP Camera Orchestrator extension. CA certificates can be added to the camera from uploaded CA certificates in Command.
88

99
### Use Cases
@@ -20,7 +20,7 @@ The Axis IP Camera Orchestrator extension DOES NOT support the following use cas
2020
1. Ability to remove client-server certificates from the camera
2121
2. Ability to add client-server certificates to the camera
2222

23-
\* Currently supported certificate usages include: **HTTPS, IEEE802.X, MQTT**
23+
\* Currently supported certificate usages include: **HTTPS**, **IEEE802.X**, **MQTT**, **Other**
2424

2525
## Requirements
2626

@@ -58,15 +58,15 @@ These values must match or the session will be denied.
5858

5959
> [!IMPORTANT]
6060
> You will want to replace the device ID certificate bound to the HTTP server with a CA-signed certificate. To do this,
61-
> you will need to schedule a reenrollment job and select "HTTPS" as the Certificate Usage.
61+
> you will need to schedule a Reenrollment job and select **HTTPS** as the Certificate Usage.
6262
6363
> [!IMPORTANT]
64-
> After associating a CA-signed certificate with the HTTP server, you need to make sure the orchestrator server trusts the HTTPS certificate.
64+
> After associating a CA-signed certificate with the HTTP server via the Reenrollment job, you need to make sure the orchestrator server trusts the HTTPS certificate.
6565
> Therefore, you will need to install the full CA chain - including root and intermediate certificates - into the orchestrator server's local
6666
> certificate store.
6767
6868
## Caveats
6969

70-
> [!CAVEAT] Reenrollment jobs will not replace or remove a client-server certificate with the same alias. They will also not remove
70+
> [!NOTE] Reenrollment jobs will not replace or remove a client-server certificate with the same alias. They will also not remove
7171
> the original certificate if a particular \`Certificate Usage\` had an associated cert. Since the camera has limited storage,
7272
> it will be up to the user to remove any unused client-server certificates via the AXIS Network Camera GUI.

0 commit comments

Comments
 (0)