Vemotion Streaming Server (VSS) Support Guide

Transcription

1 Vemotion Streaming Server (VSS) Support Guide 1

2 Table of Contents Change History... 4 Foreward... 4 How does Vemotion work?... 5 Vemotion Software... 5 Vemotion Video Server (VVS)... 5 Vemotion Encoder (VE)... 5 Local User Interface (LUI) VB3X Viewer... 6 Vemotion Streaming Server (VSS)... 6 Vemotion V264 Player and Vemotion Viewer... 6 Vemotion Android Encoder (VB-10)... 6 Vemotion Proxy... 7 Vemotion Streaming Server (VSS)... 8 Minimum Specification... 8 Installing the VSS... 8 Launching the VSS... 9 Licence Key... 9 Navigation... 9 Encoders Clients Adding ENCODERS Name Encoder ID Encoder Licenses E mail Notifications User Access PGP Encryption Install PGP4Win v Exporting keys to Streaming Server Turning on Encryption for recorded files in V Turning on Encryption for recorded Files in Streaming Server Checking the encryption is turned on for Recorded Files in Video SERVER on the Encoder The process to download and Decrypt via V264 Player ENCODER Complete Indicator Lights Yellow Green Connection Notifications Changing Encoder details Users V264 PLAYER turning Encryption of recorded files on and off Add User Name

3 Password Default Stream Permissions Encoder access Clients Connected Encoder User Address Encryption Client Licences Encoder Licences About Streaming Server Config General E Mail SSL Certificate Ports Encoder Player Alert Saver Mode Master and Slave Servers Outputs Saving Files

4 CHANGE HISTORY Version Date Change Summary Author V Initial Draft TPL V Page numbers TPL V StreamingServerConfig TPL V V3.7.7 TPL V V3.7.8 TPL V Record on/off via V264 v TPL V TLS upgrade v3.8.1 TPL V Viewing clients log ins v3.8.7 V1.25 8/8/18 PGP Encryption of Recorded files TPL TPL FOREWARD Vemotion specialise in the acquisition of analogue and IP video streams, compressing via H264 and transmission of high quality video over low bandwidth and unreliable networks, as well a cost effective delivery over high bandwidth providers. These networks include, but are not limited to Cellular, Satellite and broadband bearers. Vemotion gives the ability to switch dynamically between low and high bandwidth video streams, adjusting the video quality to suit. HD 1080p streams are catered for and ONVIF compatibility allows integration into Video Management Software (VMS) platforms. Viewing the transmitted stream can be done via a multitude of platforms, from mobile phones to command and control rooms. This handbook provides a reference for users of the Vemotion applications. It aims to help you install and set up the Vemotion software. The system is flexible and may be tailored to meet specific business requirements. For further details or if you need any extra support please contact Vemotion. 4

5 HOW DOES VEMOTION WORK? Vemotion specialise in innovative video compression enabling multiple live video channels to be transmitted to a server and then multi cast to a platform of your choice. You can allocate available bandwidth between channels, increasing picture resolution to view a scene of particular interest. VEMOTION SOFTWARE There are many software applications that work in conjunction with one another allowing video streams to be taken from any source and transmitted to the viewing client. Vemotion Video Server (VVS) The VVS allows you to program how many cameras you wish the Encoder to have access to by adding a channel per camera. The VVS also allows you to record the camera of your choice at the specific resolution, bit rate & frame rate desired. It also permits you to add either analogue or IP Cameras. It then sends the streams to the Vemotion Encoder software to begin processing. Vemotion Encoder (VE) 5

6 The Vemotion Encoder transcodes live video captured from the camera into highly-compressed data finding a perfect balance between quality and compression. Local User Interface (LUI) VB3X Viewer The VB3X viewer will allow you to connect directly to the Vemotion Video Server to enable a live stream from the camera to be viewed on the Hardware Encoder itself acting as a PC or to enable the video feed to be viewed on an HD screen. Vemotion Streaming Server (VSS) The Vemotion Stream Server is used to consolidate and distribute the Vemotion video streams. Vemotion V264 Player and Vemotion Viewer This is the software that displays the live video on the viewing device of your choice, be it CCTV control rooms, PC, laptop or Android & ios phones or tablet. The software not only displays the live video, it also enables various control options. Vemotion Android Encoder (VB-10) 6

7 This Vemotion Android Encoder will allow your phone to become the Encoder and stream video to the Streaming Server. Vemotion Proxy This software allows connection to a network video stream from the Vemotion Streaming Server from ONVIF/RTSP and web clients. These clients can be viewing management software, to recording devices and the video stream is in an open format compared to the stream that is viewed within the Vemotion Viewers and Players. 7

8 Vemotion Streaming Server (VSS) Support Guide VEMOTION STREAMING SERVER (VSS) The VSS is a lightweight windows application that can be installed on customer premises. The VSS works in conjunction with the Vemotion Encoders and Vemotion viewing clients in order to produce a complete end-to-end solution for streaming video. Minimum Specification The VSS must be installed on a Windows 7 or later operating system, with 2Ghz processor and 2G Ram, 40Gigabytes hard drive and network interface. INSTALLING THE VSS Double click the Setup file to start the installation. Follow the Setup Wizard to complete the installation. 8

9 LAUNCHING THE VSS Double-click the Vemotion Streaming Server Icon from within Windows or the shortcut on the Desktop Licence Key Select OK in the error box above and the following screen will appear. The Machine Serial code shown should be ed to with the Licence Key request: The Licence Key will be sent to you by Vemotion Copy and paste the Licence Key into the Licence Key window Click OK You will now have access to the Streaming Server. NAVIGATION By having user rights to the Vemotion Streaming Server you can dictate who can see what encoder. To allow rights you have to set up an encoder and a user with identifying passwords. There are 2 main screen sections. 9

10 Encoders This section shows the live stream channels that have been configured and details about them Clients This section shows currently active connections to the server from users and which streams they are connected to. ADDING ENCODERS Click add Encoder, and Add new encoder page will appear. When you are adding an encoder you will need to specify a number of details: Name Enter the encoder name, it is sometimes helpful to add either the camera name or the location of camera. This is the name of the encoder that will be presented to the user in the list of streams they can connect to. Encoder ID An encoder ID will need to match that of your encoder i.e VBOX The Encoder ID is the key to being able to connect to the server. This can be any string and the relevant encoder must be configured to match. Encoder Licenses Add in the type of encoder you are adding ie VB10 or VB-30 E mail Notifications 10

11 You can enter a list of comma separated addresses in here. Recipients will be sent an notification when an encoder connects or disconnects from a stream channel on the server or when an alarm has been activated through the encoder. A suitable mail server must be configured for this feature to function. User Access By pressing the edit button you can allow specific users access to this specific encoder. Click OK to save. PGP Encryption PGP encryption allows the user to be able to assign keys to the encoder in order to encrypt the recorded files. Keys can be produced by bespoke software or a common standard like PGP4Win v The process of encryption and decryption will require Streaming Server to push the keys to the encoder and V264 to decrypt once downloaded. Keys must be saved to the machine running the Streaming Server but it is easier to produce the keys on the viewing machine you will be downloading recorded files to. For example we discuss how to produce keys in the machine running V264 Player below Install PGP4Win v3.1.1 Install PGP4Win to your laptop running V264 Player. Run Kleopatra, generate new key pair Name=testkey1 and add address, press next and then Create. Enter passphrase which will be required on the machine to decrpt 11

12 You are finished. Exporting keys to Streaming Server Export to your desktop and name.pubkey... testkey1public.pubkey (make sure it does not save as.asc at the end) Copy and Paste to the streaming server machine Pick the encoder that you wish to encrypt the recorded files and Assign Key by pressing assign key and then picking the.pubkey from the desktop. This will automatically update the remote encoder with the key you have chosen. So when you go into options on the VIDEO SERVER on the encoder you will see the key already assigned. Please note this is still says Encryption status disabled. 12

13 Turning on Encryption for recorded files in V264 In order to turn the encryption on you must go to the V264 Player, right click the encoder you wish to encrypt the recorded files and click on; Turning on Encryption for recorded Files in Streaming Server When you come to edit or add an encoder, AFTER you have assigned keys you can easily turn the Encryption on and off using the toggle switch. Checking the encryption is turned on for Recorded Files in Video SERVER on the Encoder In the encoder you will now see Encryption Status Enabled. If you now go to the recorded files on the encoder you will note they are encrypted =.avi.enc 13

14 The process to download and Decrypt via V264 Player First you must set up the secret keys in V264 itself. Go to Cleopatra, file and export secret key to your desktop. Then go to V264 Player, Options and Encryption tab and Import Keys, then import the secret key you have just saved to your laptop. When you come to download the files you will be asked to enter the passphrase to decrypt the files straight to your computer. 14

15 You will now be able to play this immediately into windows media player or VLC. ENCODER COMPLETE The encoder will be added to the VSS Stream window and also show details including the Encoder Name and ID, encryption and how many connections are current. Last Connected time has been added in V to the encoders in the main Streaming Server UI. When an encoder is connected, it represents the time of connection. Where an encoder is not connected it represents the last time the connection was active. Indicator Lights The Indicator representing the encoder can be in one of two states: Yellow Yellow light means that the stream channel is configured and open but there is no encoder connected. 15

16 Green When an encoder successfully connects to the stream, the light will turn to green. This light represents the status of an encoder and can be used as a primary indicator of whether a remote encoder is connected. Connection Notifications If you have set up e mail notifications for connections an will be sent to the address set up with that encoder. This can be used by users and administrators to know when a remote encoder is online and ready to transmit video, or has gone offline. CHANGING ENCODER DETAILS Click and highlight the desired stream in the streams window and then click Edit Stream button. To delete any of the existing streams. Click and highlight the desired stream in the streams window. Click delete stream. USERS Users represent operatives who want to view live video streams through the Vemotion Streaming Server. By default there are no users added to the system. To input users, click users and then add, edit or delete a user. For each user, a username and password must be configured in the server and these must be used in the Vemotion viewer application in order for the user to be able to access and view video streams. 16

17 1 & 2 will enable/disable the local recording/snapshot buttons in an upgraded V264Player. Default permission is granted. 1 & 2 effect the ability to use snapshot and recording on the V264 player (recording on laptop running V264 not on the encoder it is connected to). So directly effecting the following buttons top right of video stream 3 allows a user with this permission to toggle encryption recording on/off (recording and encrypting files on the encoder), providing the server is licensed to allow PGP encryption. Default for this is permission not granted, unless an admin. V264 PLAYER turning Encryption of recorded files on and off Toggle has just been added to a menu in V264Player, as shown below. (You can t generate/assign keys like you can on the Streaming Server Just toggle encryption on/off if a key has already been configured) 17

18 Add User Name This is the username that a user will need to access video streams. Password This is the password that a user will need to access video streams. If required a random password can be generated by clicking the Randomise button. Default Stream When connecting to the server using a Vemotion Viewer, the user can opt to connect to a specific video feed, if they are allowed to, or the Ops Channel if a default stream is specified. 18

19 When connecting to the Ops Channel, the video feed presented to the user upon connection is called the Default Stream and is set using this option. Select an appropriate video stream. When connected to the Ops Channel, the feed that the user is watching can be changed dynamically by the Vemotion Stream Manager application. Note: To allow the user access to the Ops Channel, set a default stream. If no default stream is set, the Ops Channel will not be presented to the user for selection. PERMISSIONS Set up here what you wish you user to be able to do with the cameras by ticking the relevant boxes Encoder access This section allows you to control which users can connect and view which video encoders, if any. Users will always be able to access non-restricted video streams. (See adding video stream Authentication required option). To allow a user access to a particular restricted video encoder, check the checkbox next to the encoder name. To remove access from the user, uncheck the relevant box. To allow access to all streams tick select all box 19

20 Note: If the user is not allowed access to any restricted streams and there are no unrestricted streams on the system and the user does not have a default stream set, then they will see no video streams and be unable to view any video. Once added the user will be visible in the users page. CLIENTS The Clients window of the VSS shows details of Vemotion Viewers and Vemotion Managers connected to the VSS. The columns are as follows; Connected Shows the time and date that a connection was made Encoder Shows the video encoder that the user has connected to User Shows the user who has connected to a video encoder Address Shows IP address of the connection Encryption This shows if the link is encrypted or not CLIENT LICENCES In order for a user to view video through the Vemotion system, they must install and run a Vemotion Player application or Viewing client. The Viewing Client in most cases will not require a licence in order to run (see Viewer support guides). Multiple Vemotion Players can be loaded and run unlicensed and the administrator must set up who can view what streams. When unlicensed viewers are enabled there are only certain seats on the server available in order to view streams, i.e if only 5 concurrent viewing slots on the server, only 5 people can access the server streams at any one time. However there may be need that a specific Client will need guaranteed access at all times and therefore a license can be allocated to a certain device, i.e laptop or PC. That particular device will always have access to every video stream and are not part of the shared seats on the server. Furthermore, the licence for each guareenteed viewing client needs to be added to the VSS, this means that the VSS can allow access to the system at all times. To add, edit or delete a client licence Click on Client Licences and add license. The following window will be displayed; 20

21 Add in the Computer name the serial Mac Address and the Multi channel stream plus description, followed by the license; Click Ok and this will be added to your list of client licenses. This license can then be used to license the specific laptop which is used for administrator purposes. Licences can be changed or updated by clicking on the Edit licence button or can be deleted by clicking the delete licence button. Note. If the client licence does not exist in the Client licences list then the relevant client application will not be granted access to the server and the user will not be able to view any video. ENCODER LICENCES These are similar to client licences but relate to video encoders VB-10, VB-20, VB-30 and VB-40 products. Each Vemotion video encoder must have a unique licence associated with it. This is managed by Vemotion. To add, edit or remove an encoder licence the same procedure as client licenses should be followed. For more information about licences please contact your system administrator or contact Vemotion support. ABOUT Click the About button for information about the Vemotion Server software installed on the machine as shown below. The number and type of encoders and the number of un-licenced clients available on the VSS is shown. 21

22 Different licence types have been introduced for encoder connections. These are VB-10, VB-22, VB-3X and Unrestricted. When adding/editing an encoder you must specify which type of encoder licence you are using (from your pool of available licences). An unrestricted licence will allow any of the other types of encoder to connect. Future versions of encoders will specify what type of encoder they are, on connection to the server, so that this licence type check can be enforced. Click the Licence Details button to show the Licence Key Activation Window. This displays the machine s MAC address and the licence key details. If the Licence requires an update; Highlight and Delete the current Licence Key Paste in the new Licence Key received from Vemotion 22

23 Click the OK button in both boxes to exit About. STREAMING SERVER CONFIG Streaming Server Config allows the administrator to set up various options within the server. To access this please go to C:\Program Files (x86)\vemotion\streamingserver & open StreamingServerConfig The following options are made available; Each Option is outlined below, any changes made you will be asked if you wish to make the changes and if so the Vemotion Streaming Server will save changes and restart; 23

24 General This allows you to name the Streaming Server Window, and sort the streams alphabetically. It will also allow you to set the time either by your local time or UTC. UTC, is the primary time standard by which the world regulates clocks and time. It does not observe daylight saving time. Single Instance is for Vemotion use only. No delay is for Vemotion use only. Allows you to set an Ops channel up. Activity log retention is set to 7 days as default. This allows you to be able to view who has logged on and when. If UAC is disabled on the server machine there will be activity log files in the Streaming Server installation folder. C:\Program Files (x86)\vemotion\streamingserver to look like: Now edit with Notepad to view If UAC is enabled they will be in C:\Users\<user>\AppData\Local\VirtualStore\Program Files (x86)\vemotion\streamingserver E Mail Server is a Simple Mail Transfer Protocol (SMTP) forwarding server and can be on the local host or network. This will alerts, disconnect and alarms from encoders to an address for your choice. Port default port for SMTP. SSL - encrypted when transmitted or not. User and Pass - Some e mail servers require authentication so user and pass are added in case they are required. 24

25 From so the end user can see who the mail is form. Errors - If errors are occurring and s are not being sent an admin address can be added. Disconnect - If can t be sent within a time period, in this case 8 secs, it will not try again. Max stream notifications limits how many you can get a day. SSL Certificate SSL Certificate allows you to set up Encryption on the server and therefore allow a secure transmission from encoder to the server or server to viewer. There is the option to use any Certificate Options that already exist on the server or you have created, or use a self-signed Certificate. Select which option you wish, if not self-signed you will have to select from the options given once the Use SSL Certificate has been ticked. Select the Certificate you wish to use and press ok. A pop box will ask if you can restart the server for the Certification to be applied. Press Ok. If you are using SSL certificates the connection and corresponding validation of the certificate chain will be done in the following ways, 25

26 The certified chain is a trusted validated chain and starts and ends with the root certificate containing both the public and private key. On initial connection to the server the public client checks the certificate from the server is valid by checking the trusted root certificate. The certificate from this server is then checked that it is the host that the client expects to be connected to. The certificate authority and validation forms part of a trusted chain which is validated and secure. If you are not familiar with setting up your own certificates using a trusted certificate authority, please contact Vemotion directly. Vemotion can take you through how to set up the link to establish an encrypted secure method of transmission using TLS and secure certificate exchange. You have options on how to administer your certificates depending on whether you are on a private network with no access to the internet or if you have access to the internet. Previous streaming server only supported TLS 1.0, which was not compatible with latest ios/android software. (which requires TLS 1.2) Option to allow all modes (TLS 1.0, 1.1 and 1.2) is the default for compatibility reasons with old mobile clients. New installations of streaming server could be configured to just allow the more secure TLS 1.2 and disable 1.0 and 1.1. The change is the protocol used for the secure communication and makes no difference to the certificate, whether that be a 3 rd party purchased or self-signed. The updated TLS also requires Windows 7/Windows Server 2008 R2 or above. Now go to Ports to finish SSL set up. Ports Ports are pre-set in Vemotion software. Players are 4444 unencrypted and 5555 encrypted. Encoders are 8000 unencrypted and 8001 encrypted. If no encryption has been enabled with an SSL certificate then 5555 and 8001 will not be greyed out and unusable. Once the SSL certificate has been set up, Player and Encoder ports will no longer be greyed out and you can tick both to enable secure ports. 26

27 Once you have ticked both secure ports press ok, the Server will restart and SSL is enabled. On the Streaming Server page, Streams and Connections will now have all ports listed. Encoders can be connected if encrypted or unencrypted depending on how they are set up. Encoder For Vemotion Use only Player For Vemotion Use only Alert Saver For Vemotion Use Only Mode Master and Slave Servers Mode allows you to set up the server as a Master or a Slave in dual server installations. This can be used in conjunction with network load balancing and is the customer s responsibility to handle the IP traffic. The Network traffic will always be directed to the Master unless it becomes unavailable, in such cases the network traffic will divert to the Slave, this is dependent on how the network infrastructure is set up. Outputs These are for use with other 3 rd party integrations and bespoke. Contact Vemotion for more information. 27

28 Saving Files Saving Client licenses and config.dat file for Streaming server to transfer to another server client licenses and config.dat If the app data cannot be seen you need to go to the top tab, hit view and tick hidden items C:\users\whoever you are logged on as\appdata\local\virtualstore\programfiles(x86)\vemotion\streamingserver Once done you will have to update all encoders to the correct VB license ie VB3x If any more info is required please contact Vemotion +44 (0) or ~ End of Document ~ 28