You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docsource/content.md
+5-5Lines changed: 5 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -3,7 +3,7 @@
3
3
The AXIS IP Camera Orchestrator extension remotely manages certificates on AXIS IP Network Cameras. This
4
4
orchestrator extension inventories certificates on the camera's certificate store, and it also supports adding new client-server certificates and adding/removing CA certificates.
5
5
New client-server certificates are created in the AXIS camera certificate store via On Device Key Generation (ODKG aka Reenrollment).
6
-
This means that certificates cannot be directly added to the Axis camera, but instead the keypair is generated on the AXIS device using a keystore and a certificate is issued for that keypair via a CSR submitted to Command for enrollment.
6
+
This means that certificates cannot be directly added to the AXIS camera, but instead the keypair is generated on the AXIS device and a certificate is issued for that keypair via a CSR submitted to Command for enrollment.
7
7
This workflow is completely automated in the AXIS IP Camera Orchestrator extension. CA certificates can be added to the camera from uploaded CA certificates in Command.
8
8
9
9
### Use Cases
@@ -20,7 +20,7 @@ The Axis IP Camera Orchestrator extension DOES NOT support the following use cas
20
20
1. Ability to remove client-server certificates from the camera
21
21
2. Ability to add client-server certificates to the camera
22
22
23
-
\* Currently supported certificate usages include: **HTTPS, IEEE802.X, MQTT**
23
+
\* Currently supported certificate usages include: **HTTPS**, **IEEE802.X**, **MQTT**, **Other**
24
24
25
25
## Requirements
26
26
@@ -58,15 +58,15 @@ These values must match or the session will be denied.
58
58
59
59
> [!IMPORTANT]
60
60
> You will want to replace the device ID certificate bound to the HTTP server with a CA-signed certificate. To do this,
61
-
> you will need to schedule a reenrollment job and select "HTTPS" as the Certificate Usage.
61
+
> you will need to schedule a Reenrollment job and select **HTTPS** as the Certificate Usage.
62
62
63
63
> [!IMPORTANT]
64
-
> After associating a CA-signed certificate with the HTTP server, you need to make sure the orchestrator server trusts the HTTPS certificate.
64
+
> After associating a CA-signed certificate with the HTTP server via the Reenrollment job, you need to make sure the orchestrator server trusts the HTTPS certificate.
65
65
> Therefore, you will need to install the full CA chain - including root and intermediate certificates - into the orchestrator server's local
66
66
> certificate store.
67
67
68
68
## Caveats
69
69
70
-
> [!CAVEAT] Reenrollment jobs will not replace or remove a client-server certificate with the same alias. They will also not remove
70
+
> [!NOTE] Reenrollment jobs will not replace or remove a client-server certificate with the same alias. They will also not remove
71
71
> the original certificate if a particular \`Certificate Usage\` had an associated cert. Since the camera has limited storage,
72
72
> it will be up to the user to remove any unused client-server certificates via the AXIS Network Camera GUI.
0 commit comments