Enterprise NVR-AS 4000 Linux Appliance User Guide
Enterprise NVR-AS 4000 Linux Appliance User Guide
User Guide
Enterprise NVR-AS 4000 Linux Appliance
Legal Considerations
LAWS THAT CAN VARY FROM COUNTRY TO COUNTRY MAY PROHIBIT CAMERA SURVEILLANCE . P LEASE ENSURE THAT THE RELEVANT LAWS
ARE FULLY UNDERSTOOD FOR THE PARTICULAR COUNTRY OR REGION IN WHICH YOU WILL BE OPERATING THIS EQUIPMENT . INDIGO VISION
LTD. ACCEPTS NO LIABILITY FOR IMPROPER OR ILLEGAL USE OF THIS PRODUCT.
Copyright
COPYRIGHT © INDIGOVISION LIMITED. ALL RIGHTS RESERVED.
THIS MANUAL IS PROTECTED BY NATIONAL AND INTERNATIONAL COPYRIGHT AND OTHER LAWS. UNAUTHORIZED STORAGE, REPRODUCTION,
TRANSMISSION AND/OR DISTRIBUTION OF THIS MANUAL, OR ANY PART OF IT, MAY RESULT IN CIVIL AND/OR CRIMINAL PROCEEDINGS.
I NDIGO V ISION IS A TRADEMARK OF I NDIGO V ISION L IMITED AND IS REGISTERED IN CERTAIN COUNTRIES . I NDIGO U LTRA , I NDIGO P RO ,
I NDIGO L ITE , I NTEGRA AND C YBER V IGILANT ARE REGISTERED TRADEMARKS OF I NDIGO V ISION L IMITED . C AMERA G ATEWAY IS AN
UNREGISTERED TRADEMARK OF INDIGOVISION LIMITED. ALL OTHER PRODUCT NAMES REFERRED TO IN THIS MANUAL ARE TRADEMARKS OF
THEIR RESPECTIVE OWNERS.
S AVE AS OTHERWISE AGREED WITH I NDIGO V ISION L IMITED AND / OR I NDIGO V ISION , I NC ., THIS MANUAL IS PROVIDED WITHOUT EXPRESS
REPRESENTATION AND / OR WARRANTY OF ANY KIND . T O THE FULLEST EXTENT PERMITTED BY APPLICABLE LAWS , I NDIGO V ISION L IMITED
AND I NDIGO V ISION , I NC . DISCLAIM ALL IMPLIED REPRESENTATIONS , WARRANTIES , CONDITIONS AND / OR OBLIGATIONS OF EVERY KIND IN
RESPECT OF THIS MANUAL . A CCORDINGLY , SAVE AS OTHERWISE AGREED WITH I NDIGO V ISION L IMITED AND / OR I NDIGO V ISION , I NC ., THIS
MANUAL IS PROVIDED ON AN “AS IS”, “WITH ALL FAULTS” AND “AS AVAILABLE” BASIS. PLEASE CONTACT INDIGOVISION LIMITED (EITHER BY
POST OR BY E-MAIL AT [email protected]) WITH ANY SUGGESTED CORRECTIONS AND/OR IMPROVEMENTS TO THIS
MANUAL.
S AVE AS OTHERWISE AGREED WITH I NDIGO V ISION L IMITED AND / OR I NDIGO V ISION , I NC ., THE LIABILITY OF I NDIGO V ISION L IMITED AND
I NDIGO V ISION , I NC . FOR ANY LOSS ( OTHER THAN DEATH OR PERSONAL INJURY ) ARISING AS A RESULT OF ANY NEGLIGENT ACT OR
OMISSION BY INDIGOVISION LIMITED AND/OR INDIGOVISION, INC. IN CONNECTION WITH THIS MANUAL AND/OR AS A RESULT OF ANY USE OF
OR RELIANCE ON THIS MANUAL IS EXCLUDED TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAWS.
Contact address
IndigoVision
Caledonian Exchange,
1st Floor, 19a Canning Street,
Edinburgh,
EH3 8EG
Legal Considerations 2
Copyright 2
Contact address 2
Dell Software License Agreement 2
NVR-AS License Terms 2
2 Overview 7
Hardware 7
Enterprise NVR-AS 4000 1U variant 7
Enterprise NVR-AS 4000 2U variant 8
Enterprise NVR-AS 4000 G3 2U variant 8
Fault monitoring 9
3 Getting Started 11
Server installation 11
Installing additional disks (Enterprise NVR-AS 4000 G3 2U only) 11
Complete the initial system setup 12
Configuration 12
DHCP 13
Using a monitor and keyboard 13
Configure the License Server 13
Edge Storage Retrieval 14
NVR Footage Retrieval 15
4 Operations 17
Disk management 17
RAID redundancy 17
Replacing a faulty disk 18
Taking a disk offline 18
Whole storage array replacement 19
Install, replace or remove a redundant PSU from the Enterprise NVR-AS 4000 2U/G3 2U variant 20
Install a redundant PSU in the Enterprise NVR-AS 4000 20
Replace a redundant PSU in the Enterprise NVR-AS 4000 21
Remove a redundant PSU from the Enterprise NVR-AS 4000 2U/G3 2U variant 21
Install a new license or update an existing license 22
OMSA X.509 Certificate Management 23
SSL Server Certificates 24
5 Maintenance 25
Recover system using USB Restore Media 25
RAID configuration for the Enterprise NVR-AS 4000 1U 26
RAID configuration for the Enterprise NVR-AS 4000 2U/G3 2U 26
Recreating RAID configuration using the BIOS 27
Importing or clearing a foreign array configuration 28
6 Configuration 29
Web Configuration pages 29
Home 29
Network 30
Date & Time 31
Disk 31
NVR 32
Alarms 33
Status Monitoring 34
Network Security 34
Email 36
Bandwidth Management 36
License 37
Firmware Upgrade 38
Diagnostics 38
7 Troubleshooting 39
Monitor recordings 39
NVR Alerts 39
Recording failure alerts 39
This guide is written for users of the IndigoVision Enterprise NVR-AS 4000 system and
provides an overview of Enterprise NVR-AS 4000 as well as installation and configuration
information.
Safety notices
This guide uses the following formats for safety notices:
Indicates a hazardous situation which, if not avoided, could result in death or serious injury.
Indicates a hazardous situation which, if not avoided, could result in moderate injury,
damage the product, or lead to loss of data.
Indicates a hazardous situation which, if not avoided, may seriously impair operations.
Hardware
The Enterprise NVR- AS 4000 is available as a 1U or 2U rack mounted chassis. Two
generations of 2U platforms are supported - the 2U and G3 2U.
This variant has two 1Gbps Ethernet ports which are aggregated for greater throughput
and redundancy.
The 16 disk variant has an additional four hard-disk bays, accessible internally. These are
not hot-swappable.
These four bays and the 12 front-accessible bays are configured as a single RAID6 array
for video storage.
In addition there are also two hot-swappable disks, accessible from the rear of the device.
These disks are configured as a RAID1 array. This array is used for the operating system
and configuration information.
This variant has two 10Gbps Ethernet ports and two 1Gbps Ethernet ports. These are
configured as separate aggregated pairs for greater throughput and redundancy.
In order to use the 10Gbps Ethernet ports, you must also purchase Direct Attach twinax
cables or 10GBASE-SR fibre optic SFP+ transceiver modules from IndigoVision.
The Enterprise NVR- AS 4000 2U only supports either the 1Gbps Ethernet pair or the
10Gbps Ethernet pair to be connected at any given time, not both.
• RAID1: Two hot-swappable solid-state disks, accessible from the rear of the
device
• RAID6: 12 hot-swappable hard-disk bays, accessible from the front of the device
• 100TB/120TB
• RAID1: Two hot-swappable solid-state disks, accessible from the rear of the
device
• RAID6: Four internal (i.e. non-hot-swappable) hard-disk drives and 12 hot-
swappable hard-disk bays, accessible from the front of the device
• 140TB/168TB
• RAID1: Two internal (non-hot-swappable) solid-state disks
• RAID6: Four internal (non-hot-swappable) hard-disk drives, 12 hot-swappable
hard-disk bays, accessible from the front of the device and two hot-swappable
hard-disk bays, accessible from the rear of the device
All three configurations have two 10Gbps Ethernet ports and two 1Gbps Ethernet ports.
These are configured as an aggregated group.
In order to use the 10Gbps Ethernet ports, you must also purchase Direct Attach twinax
cables or 10GBASE-SR fibre optic SFP+ transceiver modules from IndigoVision.
The Enterprise NVR-AS 4000 G3 2U only supports either the 1Gbps Ethernet pair or the
10Gbps Ethernet pair to be connected at any given time, not both.
Fault monitoring
The Enterprise NVR- AS 4000 provides hardware fault monitoring integrated with
IndigoVision Control Center.
The following hardware is monitored:
• RAID arrays for video storage and the Operating System
• System fans
• Redundant power supplies (if installed)
• Network interfaces
The RAID arrays and fans are always monitored. The redundant power supplies and
network interface fault monitoring must be configured before these components are
monitored.
► For more information, see "Status Monitoring" on page 34
To effectively monitor the health of the IndigoVision unit, IndigoVision recommends that
you create a Device Fault Detector for the NVR.
► For more information, refer to the Control Center help.
This chapter describes the initial steps required to start using the Enterprise NVR-AS 4000
device.
Server installation
Follow the instructions provided in the Quick Start Guide to safely install the server.
Before installing the Enterprise NVR-AS 4000, review the safety instructions and guides
provided with the system.
Before installing a redundant PSU into the system, perform the initial configuration
process.
► For more information, see "Install, replace or remove a redundant PSU from the
Enterprise NVR-AS 4000 2U/G3 2U variant" on page 20
The NVR automatically runs self-test on first power-up only. If the device is powered on
after installation of the additional disks and successfully runs self-test, it rebuilds the array
as part of this process. If however, self-test has already been run prior to inserting the new
disks, a manual rebuild is required.
If you need to manually rebuild the array, the following additional steps are necessary:
1. Use a monitor and keyboard to log in to the device. The username is ‘root’ and the
password is the Web Configuration password (default: ‘admin’, if Web Configuration
has not been accessed yet).
2. Run the raidprep command to create the new storage array with the correct
configuration. This will destroy any data on the disk.
The following table outlines the options for expanding the capacity of the Enterprise NVR-
AS 4000 G3 2U variants:
Table 1Expansion capacity and options
Variant Initial disk count Supported expansion options
48TB 8 x 8TB (48TB total when in RAID6 array) 9 (56TB), 10 (64TB), 11 (72TB), 12 (80TB)
The usable capacity of disks used to expand the RAID array is limited to the capacity of the
smallest disk already in the array.
Larger disks can be used for expansion, however, any excess capacity is ignored.
For example, if 12TB disks are used to expand an array that contains 10TB disks, only
10TB is used from each of the 12TB disks.
Until the Administrator password is set you will not be able to discover the Enterprise NVR-
AS 4000 in Control Center or perform any further configuration.
Configuration
Initial configuration can be done using one of the following methods:
• Monitor and keyboard connected directly to the device
After initial configuration is complete, further device configuration and setup is completed
using the Web Configuration pages.
► For more information, see "Configuration" on page 29
DHCP
If your network supports DHCP connections, attach the device to the network and a valid IP
address is automatically assigned. The Enterprise NVR-AS 4000 can then be discovered
using the Control Center front-end application.
If your network does not support DHCP, the device will not be assigned an IP address and
you must follow the monitor and keyboard instructions.
The Enterprise NVR-AS 4000 2U/G3 2U variant only supports either the 1Gbps ethernet
pair or the 10Gbps ethernet pair to be connected at any given time, not both.
When Edge Storage Retrieval is enabled, it is enabled for all compatible cameras
connected to the NVR. It is not possible to enable it per camera or per recording job.
Edge Storage Retrieval improves the robustness of a system to allow it to cope with:
• Network interruptions between cameras and NVRs.
• Loss of power to an NVR.
Edge Storage Retrieval is limited to Video and Audio only. The following cannot be
retrieved:
• Metadata.
• Missed events.
• Alarms.
In addition to streaming to an NVR, cameras are also set-up to record to their internal
storage. After loss of power to the NVR or a network interruption, when restored, the NVR
requests missing recordings from the camera(s). The NVR attempts to retrieve available
recordings on the camera from the last 24 hours and stores them alongside previously
recorded footage. The recordings can then be played back and exported from Control
Center as normal with no distinction between recorded and retrieved footage.
The time period when a job is disabled is not remembered, so if a job is disabled then re-
enabled, the NVR can retrieve footage from the time period where the job had been
disabled.
To prevent the NVR repeatedly checking cameras, the results of the camera Profile G
compatibility check are stored in the NVR's memory. Once this information is stored the
NVR will not check a camera's Profile G compatibility again until the NVR restarts.
If a firmware upgrade is applied to a camera to provide Profile G support, the NVR must be
restarted for this change to take effect.
To use this functionality, cameras must have on board storage and must be configured with
a single active on board recording job. Missing recordings are checked for when:
1
Do not use NVR Footage Retrieval as a replacement to NVR redundancy. Use the existing
Failover functionality if that solution is required.
1
Enabling this feature can necessitate large transfers of recorded footage. If there is a
footage retention policy in place, users must make sure there is enough storage in place on
the destination NVR.
Use the NVR Configuration tab of the Web Configuration to configure the NVR Footage
Retrieval settings:
• Maximum Simultaneous Sources: The maximum number of NVRs that footage
will be retrieved from at any one time.
This setting can be set to a lower value to decrease the impact on active recording
jobs on the NVRs and network.
• Time Limit: Sets new retrieval tasks to happen only in a specific time window.
To decrease the impact on active recording jobs on the NVRs and network, you can
allow NVR Footage Retrieval when fewer recordings are scheduled.
• Start Time: Specifies the NVR Footage Retrieval start time.
• End Time: Specifies the NVR Footage Retrieval end time.
This chapter describes common tasks required for the operation of the Enterprise NVR-AS
4000 device.
Disk management
Raid status monitoring and disk replacement uses the Dell™ OpenManage™ Server
Administrator (OMSA). The OMSA can be started from the Enterprise NVR-AS 4000 Disk
configuration page.
► For more information, see "Disk" on page 31
• When accessing the OMSA, Internet Explorer indicates that there is a problem with
the website’s security certificate unless the procedure in OMSA X.509 Certificate
Management is followed. Click Continue to this website to open the OMSA.
► For more information, see "OMSA X.509 Certificate Management" on page 23
• The OMSA then requests credentials. Enter the user name root and the password
currently set for the Web Configuration pages.
RAID redundancy
The Enterprise NVR-AS 4000 1U variant uses RAID5 for all of the storage in the system:
operating system, configuration and video footage.
The Enterprise NVR-AS 4000 2U/G3 2U variants use RAID1 for operating system and
configuration information, and RAID6 for video storage.
A RAID1 or RAID5 array can tolerate a single disk failure. A RAID6 array can tolerate up to
two disks failing.
If a disk fails, it must receive attention at the earliest opportunity to maintain maximum array
redundancy.
IndigoVision recommend you create a Device Fault Detector for the NVR in order to
receive alarms if the video storage array is degraded.
► For more information, refer to the Control Center help.
Do not remove disks unnecessarily while the device is in operation. This causes the system
to consider the disk as failed.
Power off the NVR before attempting to examine or replace any internal disks.
Always use ESD protection when examining or replacing the components inside the NVR.
When the Dell OpenManage Server Administrator (OMSA) reports that a disk is faulty, it
must be replaced as soon as possible. Contact IndigoVision Technical Support to arrange
for a replacement to be supplied.
The disks installed in the Enterprise NVR-AS 4000 2U variants have different part numbers
dependent on where they are located and whether they are video storage disks or not.
Before ordering replacements, be sure to obtain the part number of the actual disk that is
malfunctioning.
Before a disk is physically removed from an Enterprise NVR-AS 4000 it must first be taken
offline using the OMSA.
Label the disks appropriately to ensure you can identify them at a later date.
After you have removed the disk array, you can replace them with either:
• An archived disk array,
• A new set of disks that can be configured as a blank storage array.
When restoring an archived storage array, all disks from the archived array must be
inserted into the NVR.
1. Insert the complete archived video storage disk array that is to be restored.
2. Power on the device.
3. Within the BIOS or using the OMSA, import the foreign disk array configuration.
► For more information, see "Importing or clearing a foreign array configuration" on
page 28
4. Reboot the Enterprise NVR-AS 4000.
The Enterprise NVR-AS 4000 is now running with the restored storage array.
The Enterprise NVR-AS 4000 G3 2U supports a storage array containing any number of
disks between 8 and 18.
Before installing a redundant PSU, perform the initial configuration for the Enterprise NVR-
AS 4000 2U/G3 2U variant.
► For more information, see "Getting Started" on page 11
The power supply unit status indicator turns green to signify that the power supply
unit is functioning correctly.
The next time the unit reboots, it may go through an automatic configuration stage
including a 2 minute power-off period. At the end of this process, the unit automatically
reboots and starts normally.
Redundant power can be monitored through Control Center by using an NVR Fault
Detector.
When replacing a redundant PSU, ensure that the other PSU is fully operational. Loss of
power may lead to corrupt or lost data.
It can take up to a minute for any configured NVR Fault Detectors monitoring this NVR-AS
to deactivate after redundant power is restored.
Remove a redundant PSU from the Enterprise NVR-AS 4000 2U/G3 2U variant
When removing a redundant PSU, ensure that the other PSU is fully operational. Loss of
power may lead to corrupt or lost data.
Any configured NVR Fault Detectors monitoring this NVR-AS remain activated until the
'Redundant PSU failure' alert is unchecked on the Status Monitoring page.
► For more information, see "Status Monitoring" on page 34
Each IndigoVision site should only have a single License Server. If you configure the
Enterprise NVR-AS 4000 to act as a License Server, make sure that there are no other
License Servers active in your site.
The Enterprise NVR-AS 4000 comes with a 45-day trial of an IndigoUltra license. This
allows you to access all features and use up to five cameras and one third-party Windows
NVR-AS in your site.
The trial period starts when you first configure the Enterprise NVR-AS 4000 to act as a
License Server.
Use the following steps to upgrade to a full license:
1. Create a fingerprint file and send it to IndigoVision with your IndigoVision order
acknowledgment number.
2. Apply the license file from IndigoVision to the Enterprise NVR-AS 4000.
When you are using a self-signed certificate, most web browsers display an untrusted
warning, because the self-signed certificate is not signed by a Certificate Authority (CA)
trusted by the operating system. Some secure browser settings can also block the self-
signed SSL certificates. The Server Administrator web GUI requires a CA-signed certificate
for such secure browsers.
You also have an option to view the certificate information and export the certificate that is
being used in the Base64–encoded format, which can be imported by other web services.
• Import certificate chain — Allows you to import the certificate chain (in PKCS#7
format) signed by a trusted CA. The certificate can be in DER or Base64-encoded
format.
• Import a PKCS12 Keystore — Allows you to import a PKCS#12 keystore that
replaces the private key and certificate used in Server Administrator web server.
PKCS#12 is a public keystore that contains a private key and the certificate for a web
server. Server Administrator uses the Java KeyStore (JKS) format to store the SSL
certificates and its private key.
Importing a PKCS#12 keystore to Server Administrator deletes the keystore entries,
and imports a private key and certificate entries to the Server Administrator JKS.
An error message is displayed if you select an invalid PKCS file or type an incorrect
password.
This chapter describes procedures and information required for the maintenance of the
Enterprise NVR-AS 4000.
This procedure deletes all data on the OS Virtual Disk. You will lose all configuration and
alarms. You will lose all video footage if you also delete the video Virtual Disk.
Before restoring the system software, replace any faulty hardware and recreate the RAID
arrays.
► For more information about faulty disk replacement, see "Replacing a faulty disk" on
page 18
► For more information about RAID configuration for anEnterprise NVR-AS 4000 1U, see
"RAID configuration for the Enterprise NVR-AS 4000 1U" on page 26
► For more information about RAID configuration for an Enterprise NVR-AS 4000 2U/G3
2U, see "RAID configuration for the Enterprise NVR-AS 4000 2U/G3 2U" on page 26
After the hardware is installed and configured, use the following procedure to recover the
system software:
1. Shut down the unit so that it is powered off.
Ensure the keyboard, mouse and monitor are attached.
2. Remove any other USB devices.
Ensure you use the USB Restore Media supplied with the specific Enterprise NVR-AS
4000 system you are recovering.
The following instructions for deleting a Virtual Disk will destroy all data on that disk. If the
OS Virtual Disk is deleted, the operating system will be destroyed and the system will need
to be recovered from the USB Restore Media, after which you will lose all configuration and
alarms. If the video Virtual Disk is deleted, you will lose all video footage.
► For more information, see "Recover system using USB Restore Media" on page 25
If you are rebuilding the video Virtual Disk, you can bypass the instructions below by using
an SSH client or a monitor and keyboard to log in to the device (username is ‘root’ and the
password is the Web Configuration password*), then running the raidprep command to
delete the existing storage array and create the new array with the correct
configuration.This will destroy all data on the array.
* If Web Configuration has not been accessed and a password set, SSH login will not be
available and local login with monitor and keyboard will use the password "admin".
The Enterprise NVR-AS 4000 G3 2U (140TB/168TB) has two controllers handling RAID
arrays.
To recreate the RAID1 OS/config array, select 'Device Settings > AHCI Controller in Slot 1:
Boss-S1 Configuration Utility'.
Otherwise select 'Device Settings > Integrated RAID Controller 1: Dell PERC <PERC
H730P Mini> Configuration Utility'
There may be existing foreign configurations that need to be imported or cleared.
► For more information, see "Importing or clearing a foreign array configuration" on page
28
• If creating a Virtual Disk on a set of physical disks that are currently unused,
select Unconfigured Capacity.
• If creating a Virtual Disk on a set of physical disks that already have some space
allocated to a Virtual Disk, select Free Capacity.
3. Click Select Physical Disks.
• If necessary, change Select Media Type to Both.
• If necessary, change Select Interface Type to Both.
4. Select the check box beside all of the disks on which Virtual Disks should be
created.
5. Make sure that the expected number of disks are selected.
6. Click Apply Changes.
7. Select the settings for the new Virtual Disk as previously specified.
► For more information, see "RAID configuration for the Enterprise NVR-AS 4000
1U" on page 26 or see "RAID configuration for the Enterprise NVR-AS 4000
2U/G3 2U" on page 26
8. Set the Default Initialization option to Fast.
9. Click Create Virtual Disk.
10.Repeat for the remaining Virtual Disks as necessary.
If the operating system is not being recovered using a USB Restore Media, prepare the
video storage with diskprep - s after the system is running again. This command
attempts to reuse any existing filesystems, but will reformat them when necessary.
This section explains the various configuration options provided by the Web Configuration
pages.
The web access password must be configured before the NVR is capable of performing
any authenticated network services, including recording.
To access any of the other configuration pages, click the required option in the menu on the
left of each page.
To save the changes made on any page, click Submit before navigating away from that
page.
Home
This section is read-only and provides a basic configuration overview of the Enterprise
NVR-AS 4000 device and its operational status.
• NVR-AS License Status — This label shows the current status of the Enterprise
NVR-AS 4000 license.
If the label is set to Licensed, then the Enterprise NVR-AS 4000 is currently
connected to a License Server which is online and has a valid license.
If the label is set to Not Licensed, then the Enterprise NVR-AS 4000 is not
connected to a License Server with a valid license.
Network
Use this page to configure the network settings.
• NVR Name — Enter a name to identify the NVR device.
• Enterprise NVR-AS 4000 Location — Enter a location to identify the device.
• Use DHCP — Check this to enable DHCP for the NVR device. When this is enabled,
the IP address, subnet mask, gateway, and name servers are obtained from the
DHCP server on the network. The options for these items are grayed out.
After switching to DHCP, you need to specify the new IP address of the network device in
the web browser. Query the DHCP server to find the assigned IP address, then use this IP
address in the web browser to navigate to the device.
The NVR device chooses the first two DNS servers that the DHCP server specifies.
If at least one NTP server is specified by the DHCP server then the NVR device will
attempt to synchronize with these NTP servers. The Date and Time page will not list
these servers and additional NTP servers can still be manually added.
If the NVR device fails to receive any configuration settings from a DHCP server on the
network, it will not be accessible on the network and you will have to use a keyboard and
monitor to set a static IP address.
► For more information, see "Configuration" on page 12.
When Edge Retrieval is selected, the functionality is enabled globally for all compatible
recording jobs on the NVR. It is not possible to enable the functionality per camera or per
job.
• Edge Retrieval Stream Limit: The maximum number of streams that are
continuously retrieved at any one time.
This setting can be set to a lower value to limit the impact on active recording jobs on
the NVR and the network.
• Edge Retrieval Rate Limit: Sets the transfer speed of a recording to the NVR.
Disk
Use this page to view the disk array status and update its configuration.
• Array Status — This indicates the overall status of the video storage array. The
status can be as follows:
• Array OK — The video storage is functioning normally.
• Array Blank — The video storage array has not been formatted with a filesystem.
This status may be seen if you are in the process of replacing the array. Press
Format to format the array and the status should change to OK.
• Array Degraded — The video storage array redundancy is degraded. Check
OMSA for details of the disks involved.
When the storage array is first built, it will need to spend a considerable amount of time
performing background initialisation. During this time, the disk will be usable, but will show
as 'Array Degraded'
• Array Rebuilding — The video storage array is rebuilding. Check OMSA for
progress of this operation.
• Array Error — There is a fault with the video storage array, such that the NVR-AS
cannot function. Contact Technical Support.
• Storage Space — This figure indicates the total storage space on the disk array.
• Used Space — Shows the percentage of disk space currently used.
• Array Maintenance:
• Open Window — Click Open Window to open the Open Manage Server
Administrator (OMSA) interface for this unit. OMSA can be used to monitor the
state of the video storage array and other hardware components on the unit.
Note that using OMSA to delete or create the video storage array when the NVR is running
is not supported, and could lead to system instability and data loss.
If you protect/unprotect all recordings, you lose the ability to identify recordings that were
individually protected/unprotected by the user in Control Center.
NVR
Use this menu to configure the NVR parameters.
• Reaping by:
Space — Recordings are only deleted when the NVR disk is becoming full.
Time and Space — Recordings are deleted either when the NVR disk is
becoming full, or when recordings reach a specified age (max age).
• Max Age — This specifies the length of time that recordings are stored on the NVR
before they are automatically deleted.
• Enable Tamper Protection on recordings — The NVR will embed digital signatures
in every recording file allowing the authenticity and integrity of that footage to be
verified at any point in the future.
Verification will happen whenever footage is exported by Control Center as part of
an Incident and the result of the verification will be written into the Incident. This
provides an extra level of security: the Incident itself is protected by a watermark
proving that the Incident has not been tampered with and the NVR digital signatures
prove that the footage on the NVR had not been tampered with at the point of export.
Tamper Protection is not compatible with video thinning. You cannot enable Tamper
Protection if video thinning is already enabled.
• Video thinning — This removes the intermediate P-frames, leaving only independent
I-frames. This leads to a reduction in storage requirements at the expense of full
motion video. Video thinning is performed on footage only when it becomes older
than the specified age.
For effective use of video thinning, it is important to configure the maximum I-frame
interval on the transmitter such that the frame rate of thinned footage is acceptable.
Video thinning is most effective on footage with significant amounts of motion.
Video thinning is not compatible with Tamper Protection. You cannot enable video
thinning if Tamper Protection is already enabled.
• Automatic Unprotect of Video — This automatically unprotects footage after a
certain time period. Footage will be unprotected only when it becomes older than the
specified age.
Enabling Automatic Unprotect in conjunction with Reaping can result in the loss of video
data that has been protected to provide evidence relating to an incident.
Recordings which are marked as “protected” are never automatically deleted (unless
automatic unprotect of video is configured).
Alarms
Use the following parameters to configure the Alarm Server.
In order to configure the Alarm Server, your Control Center license must include the Alarm
Management feature.
• Zone alarm reaping — This automatically deletes zone alarms based on their age.
Select the check box and enter the time after which zone alarms will be deleted.
When zone alarms are reaped, any activations that contributed to those alarms are also
reaped.
• Activation reaping — This automatically deletes activations that are not part of an
alarm based on their age.
Select the check box and enter the time after which activations with no associated
alarm will be deleted.
• Data record reaping: This automatically deletes data records based on their age.
Select the check box and enter the time after which data records will be deleted.
In order to configure data record reaping, your Control Center license must include the
Alarm Management and Integrated Data features.
Status Monitoring
This page shows the current state of the monitored hardware diagnostics as well as options
for configuring the generated alerts.
• PSU Redundancy (2U variants only) — Displays whether the unit currently has
redundant power through it's power supplies.
• Network Redundancy — Displays the state of the network ports that have been
configured for monitoring.
• Fan Status — Displays any fan failures on the unit. For additional information on any
indicated failures, open OMSA from the Disk page.
► For more information, see "Disk" on page 31.
• Generate Alerts — Configure alerts for the following faults:
• Redundant PSU Failure (2U variants only) — If checked, the Enterprise NVR-AS
4000 generates an alert when it does not have redundant power through its
power supplies. If the unit has been intentionally installed without redundant
power, this can be unchecked to avoid unnecessary alerts.
• Network Link Failure — If checked, the Enterprise NVR-AS 4000 generates an
alert when any of the selected Ethernet ports are not connected to a network
switch.
Alerts will always be generated in Control Center for video storage array faults, complete
network failure (device unavailable) or fan failures.
Network Security
This page allows you to specify a device password to restrict access to the Web
Configuration pages. This device password can also be used to access the device using
SSH or SFTP, when logging in as root.
• Configure User
• Change Password — Enter a password for the unit. This must contain between 8
and 32 printable ASCII (7-bit US-ASCII) characters. Enter the password again to
confirm it.
Passwords are automatically verified for security strength, and a warning will be provided if
the submitted password is not believed to be secure or could be improved.
If you forget the password, you will need to log in on the serial console or via a monitor and
keyboard connected directly to the device and reset the device's security settings
► For more information, see "Configuration" on page 12
IP Access Restrictions
• Enable — Check this box to restrict NVR access to the allowed addresses.
Before enabling the IP Access Restrictions, please make sure that a management PC is
included in the Addresses Allowed list. Failure to do so may result in a loss of connectivity,
and require physical access to the unit to disable the restrictions.
► For more information,see "Reset network security — Enter Y to reset all passwords used
to access device, disable IP Access Restrictions, and reset the device to HTTP use only
by deleting any HTTPS certificate or certificate request." on page 13.
• Addresses Allowed — Enter the IP addresses of cameras that will be used for
recording, and Control Center PCs that will be used to administer and play back
video from this NVR-AS.
To remove an address, select the address and click Remove. Shift-click or Control-
click to select more than one address.
• Add Address — Enter an IP address and click Add.
You can also enter an address range, for example 10.5.1.12-20, or a CIDR
address including a netmask, for example 192.168.123.0/24.
HTTPS Configuration
Use these settings to configure the HTTPS settings.
• Mode
Select to enable device configuration using HTTP and HTTPS. You must select at
least one option.
You must have a valid HTTPS certificate to enable HTTPS. Use the options in this
section to create and apply a certificate.
• Private Key (Regenerate)
Use this option to regenerate your private key. Using this option invalidates and
deletes any certificate or certificate request that is stored on the device.
• Self Signed Certificate
Use this option to create and install a self-signed certificate.
To create a self-signed certificate, click Create. A new page opens. Enter your
details and click OK. A self-signed certificate is generated and installed.
This option is unavailable if a certificate is already installed.
• Certificate Authority
Use this option to create a certificate request to submit to a Certification Authority for
signing. Certificate Authority Certificates created this way are specific to this device.
To create a certificate request, click Create. A new page opens. Enter your details
and click OK. A certificate request is generated and displayed in your browser. Copy
the certificate request and submit it to the Certification Authority for signing.
After the certificate request has been signed and returned, Browse to the location of
the saved certificate, then Upload it to the device.
You can View and Delete a certificate request if one is available.
• Installed Certificate
You can View and Delete the installed certificate.
Email
Use these pages to configure the email parameters.
• Email Configuration
• SMTP Server Address — The address of your email server. You can enter an IP
address, or a name such as server.example.com (if you have specified a name
server).
• SMTP Server Port — The port number used to connect to the email server. This
is usually 25 or 587.
• SMTP Server Username — This is the username used to log into your SMTP
email account (if required).
• SMTP Server Password — This is the password for the email account.
• SMTP From: Address — All emails sent by the NVR are sent from this email
address. The address must be in standard email address format.
The Enterprise NVR-AS 4000 automatically uses secure TLS encryption for email
servers that support STARTTLS. This allows emails to be sent using many corporate
or Internet mail providers.
Bandwidth Management
• Bandwidth Manager
None — Select if no bandwidth manager is used. Playback speeds will be
unconstrained.
Run Local Server — Select to run the bandwidth manager on this unit. This can
be used to limit access to cameras and NVRs on the same network.
Enter the maximum uplink bandwidth available. This is the maximum network
speed at which cameras and NVRs can be accessed from remote locations.
Access from the local network is unrestricted.
Use Remote Server — Select to use a remote bandwidth manager. Enter the IP
address of the machine hosting the bandwidth manager.
• NVR Bandwidth Limit— If a bandwidth manager is enabled, enter the maximum
bandwidth available to a playback session for this unit. The bandwidth is shared
between all playback streams in a session.
License
Use these pages to view or change the License Server used by the Enterprise NVR-AS
4000.
License Server — A valid License Server must be configured to allow the Enterprise NVR-
AS 4000 to record.
► For more information, refer to the Control Center Installation Guide.
The Enterprise NVR-AS 4000 can access an IndigoVision License Server in the following
ways:
• The Enterprise NVR-AS 4000 can use an existing License Server running on a
separate device specified using the License Server's IP address
• The Enterprise NVR-AS 4000 can act as a License Server for the Control Center site
Each IndigoVision site should only have a single License Server. If you configure the
Enterprise NVR-AS 4000 to act as a License Server, make sure that there are no other
License Servers active in your site.
If the Enterprise NVR-AS 4000 is configured to act as a License Server, you must manually
configure all instances of Control Center and the other NVR-AS devices in your site to use
this Enterprise NVR-AS 4000 as a License Server.
License Management
The installed Control Center license can be updated here when the Enterprise NVR-AS
4000 is acting as a License Server.
► For more information, see "Install a new license or update an existing license" on page
22
License Information
This section shows information about the configured License Server.
• License Server Status — This shows the status of the configured License Server.
This can be one of the following:
• Unconfigured
• Offline
• Unlicensed
• Licensed
• License ID — The unique id of the installed license. This is only shown if the License
Server is licensed.
• Trial Expiry — The date which the trial license expires. This is only shown if the
License Server is using a trial license.
• License Tier — The tier of the installed License. This is only shown if the License
Server is licensed.
• Device Connections — The total number of Device Connections the installed license
supports and the number that are currently unused. This is only shown if the License
Server is licensed.
Firmware Upgrade
Browse to the vex file you require to upgrade your unit, then click Perform Upgrade .
Uploading the vex file may take a few minutes. After the file has been uploaded, follow the
on-screen instructions to start the upgrade process. The upgrade itself will take several
minutes. It is important not to power off the unit or disconnect it from the network during this
process.
Diagnostics
These pages provide support information which may be requested by your IndigoVision
supplier.
• Support Information - This button downloads a zip archive containing diagnostic
information. Provide this file to Technical Support when reporting any issues with the
unit.
• Maintenance:
• Reset - Click to reset all NVR-AS settings configured from the web pages and the
device password, and reboot the unit.
The NVR-AS device retains its IP address, subnet mask, gateway and DNS
servers, and HTTPS configuration.
• Reboot - Click to reboot the device.
• Power Off - Click to power off the device.
If the device is powered off using this option, the device will only power on again when the
physical power button on the front panel is pressed.
Monitor recordings
To monitor jobs that are currently recording, use IndigoVision’s Control Center application.
Control Center allows you to monitor all jobs on your NVR-AS. It allows you to set up
recording jobs on NVRs on a visible network. You can also use it to view any existing jobs
and their current state (enabled, disabled, recording, etc).
If a transmitter shows Trying to record in Control Center’s recording schedule this
indicates a problem with the transmitter. You should check the network connections and
that the device is switched on. You should then try to access the device’s Web
Configuration pages.
NVR Alerts
You should pay particular attention to the following alerts in Control Center:
• Disk Full
Disk full alerts indicate that the NVR-AS disk is full, and that the NVR-AS cannot
delete any recordings, for example, because they are protected. Use Control Center
to check for recordings marked as Protected and unprotect these recordings.
• Maximum Recordings
These indicate that the maximum number of recordings has been exceeded. This
may be because there are too many short recordings.
IndigoVision's NVR-AS products use code that is freely available under the General Public
License (GPL).
This license makes it a requirement to release changes made to the source code. In
compliance, the GPL source code and any changes made by IndigoVision are available on
request through IndigoVision Customer Support.