Enabling fusion stream encryption

To protect the privacy of your data, you can enable fusion stream encryption either on the Archiver role or on individual cameras.

Before you begin

Request and install the encryption certificates on the client machines authorized to access your company's private data.

What you should know

It is not necessary to install the certificates on the Archiver server. The encryption certificates are applied to the Archiver through Config Tool. For this reason, Config Tool must have access to the certificates, either from the certificate store of the local machine, or from exported certificate (.cer) files.

IMPORTANT: To enable encryption, you must add at least one certificate to the Archiver.

To enable fusion stream encryption:

From the Config Tool home page, open the Video task.
Do one of the following:
- To enable encryption on the Archiver, select the Archiver role to configure, and click the Camera default settings tab.
- To enable encryption on a camera, select the camera to configure, click the Recording tab, and then click Custom settings.
Click Show advanced settings and set the Encryption slider to ON.
Under Certificates, click Add an item ().
The Select certificate dialog box opens.
If the encryption certificates are installed on your local computer, select them from the Installed certificates list, and click OK.
If the encryption certificates are not installed on your local computer, find and install them:
1. Select Browse certificate file.
2. Click the browse icon () and navigate to the folder where the certificates files are saved.
  The browser looks for X.509 Certificates files by default. If you do not find the files you want, look for Personal Information Exchange files instead.
3. Select the certificates you want, and click Open.
4. If the certificate file is password-protected, click the advanced show icon () and enter the password.
5. (Optional) Click Validate file to make sure the selected file contains a public key.
6. Click OK.
Click Apply.

The Archiver starts encrypting all data streamed from the selected cameras. Only client workstations with one or more of the configured certificates are able to view the data recorded from now on.