Frm ST-VS/MKP1 Prduct Management 18.12.2017 Release Letter Cmbined Firmware fr CPP7.3 UHD/HD/MP cameras CPP7 HD/MP cameras Prducts: CPP6 UHD/MP cameras CPP5 encders CPP4 HD cameras CPP3 cameras and encders CPP-ENC H.264 encders Versin: 6.42.1215 This letter cntains latest infrmatin abut the abve mentined firmware versin. 1 General This firmware release is a cmbined firmware package, applicable t H.264 and H.265 prducts based n ne f the fllwing platfrms. Changes since last release are marked in blue. 1 f 12 BOSCH and the symbl are registered trademarks f Rbert Bsch GmbH, Germany
Frm ST-VS/MKP1 Prduct Management 18.12.2017 This firmware supprts: CPP7.3 HD and UHD cameras update frm FW 6.40 r newer t latest FW 6.42 CPP7 UHD cameras update frm FW 6.30 r newer t latest FW 6.42 CPP6 UHD cameras update frm FW 6.10 r newer t latest FW 6.42 CPP5 encders update frm FW 5.91 r newer t FW 6.30 CPP4 HD cameras update frm FW < 6.10 t intermediate FW 6.11 update frm FW 6.10 r newer t latest FW 6.42 CPP3 cameras and encders update frm FW 4.54.0026 r newer t latest FW 5.74 CPP-ENC VIP-X1600-XFM4 encders: update frm FW 4.2x r newer t latest FW 5.53 VJT XF and VJD-3000 update t latest FW 5.97 The cmbined firmware package includes the fllwing build versins: CPP7.3 FW 6.42.0021 CPP7 H.264 6.42.0021 CPP6 H.264 6.42.0021 CPP5 H.264 6.30.0047 CPP4 H.264 6.42.0021 CPP4 H.264 6.11.0021 CPP3 H.264 5.74.0004 CPP-ENC H.264 5.97.0005 fr VJT XF family, VJD-3000 and VJC-7000 CPP-ENC H.264 5.53.0004 fr VIP X1600 XFM4 Fr detailed descriptin please refer t the separate release letters. Nte: Due t an internal file system being intrduced t CPP4 and CPP6 since firmware 6.10 and architectural changes theref, a direct upgrade frm firmware belw versin 6.10 t latest firmware is nly pssible via intermediate firmware 6.1x. CPP4 cameras with firmware versins belw 6.10 need t uplad this package twice. Nte: T upgrade t a newer firmware versin using this cmbined firmware package, firmware versins befre 5.5x require an intermediate update cycle using the respective platfrm firmware versin mentined abve. Nte: This cmbined firmware cannt be applied t CPP5 prducts with firmware versin lder than 5.91. It is required t upgrade t intermediate firmware 5.91 first. 2 f 12 BOSCH and the symbl are registered trademarks f Rbert Bsch GmbH, Germany
Frm ST-VS/MKP1 Prduct Management 18.12.2017 2 Applicable prducts: CPP7.3 AUTODOME IP 4000i AUTODOME IP 5000i AUTODOME IP starlight 7000i DINION IP bullet 4000i DINION IP bullet 5000i DINION IP bullet 6000i FLEXIDOME IP 4000i FLEXIDOME IP 5000i FLEXIDOME IP starlight 8000i HD FLEXIDOME IP starlight 8000i 6MP FLEXIDOME IP ultra 8000i MP UHD MIC IP starlight 7000i MIC IP fusin 9000i CPP7 DINION IP starlight 6000 DINION IP starlight 7000 FLEXIDOME IP starlight 6000 FLEXIDOME IP starlight 7000 DINION IP thermal 8000 3 f 12 BOSCH and the symbl are registered trademarks f Rbert Bsch GmbH, Germany
Frm ST-VS/MKP1 Prduct Management 18.12.2017 CPP6 DINION IP starlight 8000 12MP DINION IP ultra 8000 12MP DINION IP ultra 8000 12MP with C/CS munt telepht lens FLEXIDOME IP panramic 7000 12MP 180 FLEXIDOME IP panramic 7000 12MP 360 FLEXIDOME IP panramic 7000 12MP 180 IVA FLEXIDOME IP panramic 7000 12MP 360 IVA FLEXIDOME IP panramic 6000 12MP 180 FLEXIDOME IP panramic 6000 12MP 360 FLEXIDOME IP panramic 6000 12MP 180 IVA FLEXIDOME IP panramic 6000 12MP 360 IVA CPP5 VIDEOJET multi 4000 VIP-X16XF-E 4 f 12 BOSCH and the symbl are registered trademarks f Rbert Bsch GmbH, Germany
Frm ST-VS/MKP1 Prduct Management 18.12.2017 CPP4 (frmerly IPBE4) AUTODOME IP 4000 HD AUTODOME IP 5000 HD AUTODOME IP 5000 IR AUTODOME 7000 series DINION HD 1080p DINION HD 1080p HDR DINION HD 720p DINION imager 9000 HD DINION IP bullet 4000 DINION IP bullet 5000 DINION IP 4000 HD DINION IP 5000 HD DINION IP 5000 MP DINION IP starlight 7000 HD EXTEGRA IP dynamic 9000 EXTEGRA IP starlight 9000 FLEXIDOME crner 9000 MP FLEXIDOME HD 1080p FLEXIDOME HD 1080p HDR FLEXIDOME HD 720p Vandal-prf FLEXIDOME HD 1080p Vandal-prf FLEXIDOME HD 1080p HDR Vandal-prf FLEXIDOME HD 720p FLEXIDOME IP panramic 5000 FLEXIDOME IP indr 5000 HD FLEXIDOME IP indr 5000 MP FLEXIDOME IP indr 4000 HD FLEXIDOME IP indr 4000 IR FLEXIDOME IP utdr 4000 HD FLEXIDOME IP utdr 4000 IR FLEXIDOME IP micr 5000 HD FLEXIDOME IP micr 5000 MP FLEXIDOME IP utdr 5000 HD FLEXIDOME IP utdr 5000 MP FLEXIDOME IP micr 2000 HD FLEXIDOME IP micr 2000 IP IP bullet 4000 HD IP bullet 5000 HD IP micr 2000 IP micr 2000 HD MIC IP dynamic 7000 MIC IP starlight 7000 TINYON IP 2000 family MIC IP dynamic 7000 MIC IP starlight 7000 TINYON IP 2000 family 5 f 12 BOSCH and the symbl are registered trademarks f Rbert Bsch GmbH, Germany
Frm ST-VS/MKP1 Prduct Management 18.12.2017 CPP3 (frmerly IPBE3) AUTODOME Easy II IP series AUTODOME Junir HD, Jr HD fix AUTODOME 700 IP IVA AUTODOME 800 AUTODOME Junir 800 VG4 AUTODOME IP series VG5 AUTODOME IP series DINION XF 720p+, NBN-921-P DINION XF, NBC-455-P DINION 2X, NBN-498-P FLEXIDOME XF 720p+, NDN-921-P FLEXIDOME XF, NDC-455-P FLEXIDOME 2X, NDN-498-P Ecnmy Bx Cameras, NBC-225 series, NBC-255 series, NTC-255-PI Ecnmy Dme Cameras, NDC-225 series, NDC-255 series Ecnmy HD Bx Cameras, NBC-265 series, NTC-265-PI Ecnmy HD Dme Cameras, NDC-265 series, NDN-265-PIO Extreme series EX30 IR, NEI-30 IR Imager Far Infra-Red camera, VOT-320 VIP X1 XF Single-Channel H.264 Encder WLAN cameras NBC-255-W and NBC-265-W Ecnmic versin VIP-X1XF-E Vide Cnference Dme IVA REG 1.5 IP and REG L2 MIC IP PSU CPP-ENC (frmerly VIPX H.264) VIP-X1600-XFM4 VJT-X20/X40XF-E VJT-XTCXF VIDEOJET decder 3000, VJD-3000 VIDEOJET cnnect 7000, VJC-7000 6 BOSCH and the symbl are registered trademarks f Rbert Bsch GmbH, Germany
Frm ST-VS/MKP1 Prduct Management 18.12.2017 3 New Features fr CPP7.3 prducts Encding Supprt f H.265 cmpressin A camera can be cnfigured t use either H.265 r H.264. As H.265 requires mre CPU perfrmance, there might be limitatins t maximum frame rate under certain cnditins. Nte: H.265 requires apprx. 4 times the perfrmance fr decding cmpared t H.264. Installed wrkstatins, decders and sftware might lack the perfrmance t fluently decde H.265 streams. 4 New Features fr CPP7.3, CPP7, CPP6 and CPP4 prducts Intelligent Streaming Intelligent Streaming is a cmbinatin f features and functins t ptimize bitrate cnsumptin f recrded vide. It benefits frm imprved nise reductin in still areas f the image, an average nise level cmmunicated t the encder, larger GOP size, strng use f predictin in case f B slices, and dynamic tuning f quantizatin parameters (QP) in the encder. The strength f the bitrate ptimizatin can be set via 5 levels. Savings can be up t 90% using H.265 cmpressin but are strngly scene-dependent. Imaging Supprt f 120 db high dynamic range fr 5000 camera series has been added. Imprved nise filtering in still scenes. VCA Fr details n VCA 6.40 please refer t the separate release ntes f Essential Vide Analytics r Intelligent Vide Analytics. ONVIF ONVIF manual iris and fcus cntrls added. Feature cverage f the ONVIF metadata stream has been extended t include e.g. bject classes, bject shape plygns, faces, flame and smke detectin inf. Prfile G supprt 7 BOSCH and the symbl are registered trademarks f Rbert Bsch GmbH, Germany
Frm ST-VS/MKP1 Prduct Management 18.12.2017 Security Passwrd enfrcement New cameras with this firmware installed will nly becme perable after the passwrd fr the administratin level (user service ) has been assigned. Other users user and live will nly becme accessible after the administratr assigned passwrds t them. Cameras which are updated t this firmware frm a versin lwer than 6.40 will nt change their behaviur and remain at their frmer prtectin level unless reset t factry defaults. Strnger user name and passwrd plicy is enfrced. The fllwing rules apply: User names must be at least five (5) characters lng. User name and passwrd must nt be identical. A passwrd must cnsist f minimum eight (8) characters. A passwrd must cntain bth upper-case and lwer-case letters. A passwrd must include ne r mre numerical digits. A passwrd must include at least ne f these special characters:!? " # $ % ( ) { } [ ] * + - =., ; ^ _ ~ \ Other special characters (like space @ : < > ' & etc.) are nt supprted. Signed firmware file enfrcement Only Bsch-signed firmware will be accepted by the camera withut cmprmises. Data encryptin n iscsi strages The paylad n an iscsi drive is encrypted using a symmetric XTS encryptin scheme (blck encryptin). The camera uses a number f public keys t asymmetrically encrypt the XTS key fr multiple receivers. These public keys are maintained in the certificate stre via certificates. Usage can be defined as fr recrding1 and/r recrding2. Paylad encryptin is pssible n SD cards as well as n external iscsi strage. A client that shall be allwed t replay this ftage must have its cert/key registered and activated. The Vide Recrding Manager (VRM) may als be a receiver t decrypt the paylad data fr replay. SRTP paylad encryptin fr live and replay SRTP prvides paylad encryptin f UDP streams via TLS, similar t what HTTPS des by using TLS fr TCP streams. Als encrypted multicast cnnectins are pssible. SNMPv3 supprt New alternative SNMP supprt prvides encryptin and authenticatin. This new service will prvide pure MIB-II access. Legacy functins, like NTCIP supprt r mapping f dedicated RCP cmmands t SNMP Enterprise MIB ndes, are nly prvided with existing SNMPv1 implementatin. Certificate revcatin list (CRL) supprt 8 BOSCH and the symbl are registered trademarks f Rbert Bsch GmbH, Germany
Frm ST-VS/MKP1 Prduct Management 18.12.2017 T imprve usability and prvide a mre cmpact verview, the web user interface fr the certificate stre has been updated. It nw allws direct tagging f certificates fr usages. The frmer split int tw areas (Files and Usage) is remved. Strnger encryptin and passwrd prtectin fr cnfiguratin file The cnfiguratin file is encrypted and passwrd-prtected befre dwnlad. The user as the wner f this cnfiguratin file is prmpted fr the passwrd. The passwrd is required when the cnfiguratin file is upladed t a camera. The cnfiguratin file is encrypted using standard mechanisms but nt intended t be pened r mdified by the user, thus the encryptin key itself is kept internal and nt expsed. Strnger encryptin fr maintenance lg file The maintenance lg file as being used in tech supprt cases is encrypted with a Bsch public key. Only tech supprt staff is authrized t decrypt and pen the file. The minimum TLS versin can be defined, e.g. t avid vulnerabilities frm TLS 1.0 and 1.1. The Telnet cnsle has been cmpletely remved and is substituted by a new lgging facility prviding: A mre structured utput including timestamp, severity and mdule surces Search and filtering fr specific events via web user interface Direct utput t a syslg server Cnfiguratin t prduce similar debug printuts fr tech supprt as previusly Cnslidatin f running services, visualized n new page Netwrk Services. Only thse services (HTTP, HTTPS, RTSP, RCP, iscsi, NTP, discvery, ONVIF discvery) are running which are required fr activated functinality. All ther services (FTP, SNMP, UPnP, GB/T 28181) and their respective prts are deactivated. The passwrd unlck functinality (supprt recvery ptin) can be disabled. CHAVE cameras Multiple trusted issuers are nw allwed fr client certificate authenticatin. An ptin t nt wipe the SXI certificate when a factry default is issued has been added. Installatin Cde has been enhanced with a blck fr crypt-cprcessr versin indicatrs. The Installatin Cde thus has a length f 48 digits instead f nly 44 digits. Multicast discvery prt is nw cnfigurable via brwser interface. Please check the release letters f CPP7.3, CPP7, CPP6 and CPP4 FW 6.42.0021 fr cmpleteness and details. 9 BOSCH and the symbl are registered trademarks f Rbert Bsch GmbH, Germany
Frm ST-VS/MKP1 Prduct Management 18.12.2017 5 Changes fr CPP7.3, CPP7, CPP6 and CPP4 prducts The base frame rate default fr DINION IP bullet 6000i has been changed t 60 fps. An issue where spradically n vide was shwn after pwer cycle has been fixed. An issue where Autmatic Netwrk Replenishment ANR failed when SD card is brken has been fixed. Imprved behaviural respnse n denial f service attacks. Varius ONVIF cmmunicatin issues have been fixed. Varius smaller issues have been fixed. Please check the release letters f CPP7.3, CPP7, CPP6 and CPP4 FW 6.42.0021 fr cmpleteness and details. 10 BOSCH and the symbl are registered trademarks f Rbert Bsch GmbH, Germany
Frm ST-VS/MKP1 Prduct Management 18.12.2017 6 Restrictins; Knwn Issues This firmware and its included platfrm firmware builds are nt applicable t MPEG-4 prducts. The final firmware versin fr VIP-X1600-XFM4 mdules is FW 5.53. N newer firmware will be prvided fr these mdules. Cnfiguratin Manager cannt uplad this Cmbined Firmware file t VIP-X1600-XFM4 mdules. Use the mdule s web page instead fr uplading; r use the separate firmware file. The final firmware versin fr CPP3 devices is FW 5.74. N newer firmware will be prvided fr these prducts. The Cmbined Firmware file des nt lad nt VG4 AutDme r AutDme Easy II via the brwser when running a firmware versin befre 5.52.0017. The specific platfrm file shuld be used instead. Cameras r encders with a minimum firmware versin that is higher than the lwest firmware versin in the cmbined firmware file may shw errr 0x0b in the uplad histry which can be ignred. Firmware uplad is nt affected by this. CPP4 cameras with firmware versins belw 6.10 need t uplad this package twice t receive the latest firmware versin. CPP6 cameras with firmware versins belw 6.10 need t uplad the separate firmware versin 6.1x first t receive the latest firmware versin. With prducts running firmware 6.32 belw built 111, spradically ccurring incrrect time zne inf in recrding packets may lead t gaps displayed in the playback timeline. The vide ftage within the gap cannt be replayed but becmes accessible via exprting the affected perid. Please check the respective release letter f a camera r encder fr further device-specific restrictins. 11 BOSCH and the symbl are registered trademarks f Rbert Bsch GmbH, Germany
Frm ST-VS/MKP1 Prduct Management 18.12.2017 7 System Requirements Pssible clients fr cnfiguratin purpses: Cnfiguratin Manager 5.51 r newer Web Brwsers: Micrsft Internet Explrer 11.0 r higher Mzilla Firefx Pssible clients fr peratin purpses: Bsch Vide Security ipad App 1.2 Web Brwsers: Micrsft Internet Explrer 11.0 r higher Mzilla Firefx BVC 1.7 r newer Oracle Java Virtual Machine 1.6.0_35 DirectX 9.0c MPEG-ActiveX 6.12 r newer 12 BOSCH and the symbl are registered trademarks f Rbert Bsch GmbH, Germany