vemotion streaming server (vss) · 2020. 4. 20. · keys must be saved to the machine running the...
TRANSCRIPT
1
Vemotion Streaming
Server (VSS)
Support Guide
Table of Contents
Change History ...................................................................................................................................... 4
Foreward ................................................................................................................................................ 4
How does Vemotion work? .................................................................................................................. 5
2
Vemotion Software ................................................................................................................................ 5 Vemotion Video Server (VVS) .............................................................................................................
5 Vemotion Encoder (VE) .......................................................................................................................
5 Local User Interface (LUI) – VB3X Viewer ..........................................................................................
6 Vemotion Streaming Server (VSS) ......................................................................................................
6 Vemotion V264 Player and Vemotion Viewer .....................................................................................
6 Vemotion Android Encoder (VB-10) ....................................................................................................
6 Vemotion Proxy ...................................................................................................................................
7
Vemotion Streaming Server (VSS) ...................................................................................................... 8 Minimum Specification .........................................................................................................................
8
Installing the VSS .................................................................................................................................. 8
Launching the VSS ............................................................................................................................... 9 Licence Key .........................................................................................................................................
9
Navigation .............................................................................................................................................. 9 Encoders............................................................................................................................................
10 Clients ................................................................................................................................................
10
Adding ENCODERS ............................................................................................................................
10 Name
................................................................................................................................................. 10 Encoder ID .........................................................................................................................................
10 Encoder Licenses ..............................................................................................................................
10 E mail Notifications ............................................................................................................................
10 User Access ......................................................................................................................................
11 PGP Encryption .................................................................................................................................
11
Install PGP4Win v3.1.1.................................................................................................................................. 11
Exporting keys to Streaming Server ..................................................................................................
12 Turning on Encryption for recorded files in V264 ..............................................................................
13 Turning on Encryption for recorded Files in Streaming Server .........................................................
13 Checking the encryption is turned on for Recorded Files in Video SERVER on the Encoder ..........
13 The process to download and Decrypt via V264 Player ................................................................... 14
ENCODER Complete ........................................................................................................................... 15
3
Indicator Lights ..................................................................................................................................
15
Yellow ........................................................................................................................................................... 15
Green ............................................................................................................................................................ 16
Connection Notifications .............................................................................................................................. 16
Changing Encoder details .................................................................................................................. 16
Users .................................................................................................................................................... 16 V264 PLAYER turning Encryption of recorded files on and off .........................................................
17 Add User ............................................................................................................................................ 18
Name ............................................................................................................................................................ 18
Password....................................................................................................................................................... 18
Default Stream .............................................................................................................................................. 18
Permissions ......................................................................................................................................... 19 Encoder access .................................................................................................................................
19
Clients .................................................................................................................................................. 20 Connected ......................................................................................................................................... 20 Encoder .............................................................................................................................................
20 User ...................................................................................................................................................
20 Address..............................................................................................................................................
20 Encryption ..........................................................................................................................................
20
Client Licences .................................................................................................................................... 20
Encoder Licences ............................................................................................................................... 21
About .................................................................................................................................................... 21
Streaming Server Config ....................................................................................................................
23 General
.............................................................................................................................................. 24 E Mail .................................................................................................................................................
24 SSL Certificate ...................................................................................................................................
25 Ports ..................................................................................................................................................
26 Encoder .............................................................................................................................................
27 Player .................................................................................................................................................
27 Alert Saver .........................................................................................................................................
27 Mode – Master and Slave Servers ....................................................................................................
27 Outputs ..............................................................................................................................................
27
4
Saving Files .......................................................................................................................................
28
CHANGE HISTORY
Version Date Change Summary Author
V1.0 27.04.2016 Initial Draft TPL
V1.1 13.05.2016 Page numbers TPL
V1.2 25.07.2016 StreamingServerConfig TPL
V1.21 05.10.16 V3.7.7 TPL
V1.22 10.10.16 V3.7.8 TPL
V1.225 03.04.17 Record on/off via V264
v3.7.11
TPL
V1.23 31.08.17 TLS upgrade v3.8.1 TPL
5
V1.24 16.02.18 Viewing clients log ins
v3.8.7
TPL
V1.25 8/8/18 PGP Encryption of
Recorded files
TPL
V1.26 20/04/20 Server recording DS
FOREWARD
Vemotion specialise in the acquisition of analogue and IP video streams, compressing via H264 and
transmission of high quality video over low bandwidth and unreliable networks, as well a cost effective
delivery over high bandwidth providers. These networks include, but are not limited to Cellular, Satellite and
broadband bearers. Vemotion gives the ability to switch dynamically between low and high bandwidth video
streams, adjusting the video quality to suit. HD 1080p streams are catered for and ONVIF compatibility allows
integration into Video Management Software (VMS) platforms. Viewing the transmitted stream can be done
via a multitude of platforms, from mobile phones to command and control rooms.
This handbook provides a reference for users of the Vemotion applications. It aims to help you install and set
up the Vemotion software.
The system is flexible and may be tailored to meet specific business requirements.
For further details or if you need any extra support please contact Vemotion.
HOW DOES VEMOTION WORK?
Vemotion specialise in innovative video compression enabling multiple live video channels to be transmitted to
a server and then multi cast to a platform of your choice. You can allocate available bandwidth between
channels, increasing picture resolution to view a scene of particular interest.
6
VEMOTION SOFTWARE
There are many software applications that work in conjunction with one another allowing video streams to be
taken from any source and transmitted to the viewing client.
Vemotion Video Server (VVS)
The VVS allows you to program how many cameras you wish the Encoder to have access to by adding a
channel per camera. The VVS also allows you to record the camera of your choice at the specific resolution, bit
rate & frame rate desired. It also permits you to add either analogue or IP Cameras. It then sends the streams
to the Vemotion Encoder software to begin processing.
Vemotion Encoder (VE)
7
The Vemotion Encoder transcodes live video captured from the camera into highly-compressed data finding a
perfect balance between quality and compression.
Local User Interface (LUI) – VB3X Viewer
The VB3X viewer will allow you to connect directly to the Vemotion Video Server to enable a live stream from
the camera to be viewed on the Hardware Encoder itself acting as a PC or to enable the video feed to be
viewed on an HD screen.
Vemotion Streaming Server (VSS)
The Vemotion Stream Server is used to consolidate and distribute the Vemotion video streams.
Vemotion V264 Player and Vemotion Viewer
This is the software that displays the live video on the viewing device of your choice, be it CCTV control rooms,
PC, laptop or Android & iOS phones or tablet. The software not only displays the live video, it also enables
various control options.
Vemotion Android Encoder (VB-10)
8
This Vemotion Android Encoder will allow your phone to become the Encoder and stream video to the
Streaming Server.
This software allows connection to a network video stream from the Vemotion Streaming Server from
ONVIF/RTSP and web clients. These clients can be viewing management software, to recording devices and the
video stream is in an open format compared to the stream that is viewed within the Vemotion Viewers and
Players.
Vemotion Streaming
Server (VSS) Support Guide VEMOTION STREAMING SERVER (VSS)
Vemotion Proxy
9
The VSS is a lightweight windows application that can be installed on customer premises.
The VSS works in conjunction with the Vemotion Encoders and Vemotion viewing clients in order to produce a
complete end-to-end solution for streaming video.
Minimum Specification The VSS must be installed on a Windows 7 or later operating system, with 2Ghz processor and 2G Ram,
40Gigabytes hard drive and network interface.
INSTALLING THE VSS
• Double click the ‘Setup’ file to start the installation.
• Follow the Setup Wizard to complete the installation.
LAUNCHING THE VSS
Double-click the Vemotion Streaming Server Icon from within Windows or the shortcut on the Desktop
Licence Key Select ‘OK’ in the error box above and the following screen will appear.
10
The Machine Serial code shown should be emailed to [email protected] with the Licence Key request:
• The Licence Key will be sent to you by Vemotion
• Copy and paste the Licence Key into the Licence Key window
• Click ‘OK’
You will now have access to the Streaming Server.
NAVIGATION
By having user rights to the Vemotion Streaming Server you can dictate who can see what encoder.
To allow rights you have to set up an encoder and a user with identifying passwords. There are 2 main screen
sections.
Encoders This section shows the live stream channels that have been configured and details about them
Clients This section shows currently active connections to the server from users and which streams they are
connected to.
ADDING ENCODERS
Click add Encoder, and Add new encoder page will appear.
11
When you are adding an encoder you will need to specify a number of details:
Name Enter the encoder name, it is sometimes helpful to add either the camera name or the location of camera. This
is the name of the encoder that will be presented to the user in the list of streams they can connect to.
Encoder ID An encoder ID will need to match that of your encoder i.e VBOX356-1. The Encoder ID is the key to being able
to connect to the server. This can be any string and the relevant encoder must be configured to match.
Encoder Licenses Add in the type of encoder you are adding ie VB10 or VB-30
E mail Notifications You can enter a list of comma separated email addresses in here. Recipients will be sent an email notification
when an encoder connects or disconnects from a stream channel on the server or when an alarm has been
activated through the encoder. A suitable mail server must be configured for this feature to function.
User Access By pressing the edit button you can allow specific users access to this specific encoder.
Click ‘OK’ to save.
12
PGP Encryption PGP encryption allows the user to be able to assign keys to the encoder in order to encrypt the recorded files.
Keys can be produced by bespoke software or a common standard like PGP4Win v3.1.1. The process of
encryption and decryption will require Streaming Server to push the keys to the encoder and V264 to decrypt
once downloaded.
Keys must be saved to the machine running the Streaming Server but it is easier to produce the keys on the
viewing machine you will be downloading recorded files to.
For example we discuss how to produce keys in the machine running V264 Player below
Install PGP4Win v3.1.1
Install PGP4Win to your laptop running V264 Player.
Run Kleopatra, generate new key pair
Name=testkey1 and add email address, press next and then Create.
Enter passphrase which will be required on the machine to decrpt
13
You are finished.
Exporting keys to Streaming Server
Export to your desktop and name .pubkey ... testkey1public.pubkey (make sure it does not save as
.asc at the end)
Copy and Paste to the streaming server machine
Pick the encoder that you wish to encrypt the recorded files and Assign Key by pressing assign key and then
picking the .pubkey from the desktop.
This will automatically update the remote encoder with the key you have chosen. So when you go into options
on the VIDEO SERVER on the encoder you will see the key already assigned. Please note this is still says
Encryption status disabled.
14
Turning on Encryption for recorded files in V264 In order to turn the encryption on you must go to the V264 Player, right click the encoder you wish to encrypt
the recorded files and click on;
Turning on Encryption for recorded Files in Streaming Server
When you come to edit or add an encoder, AFTER you have assigned keys you can easily turn the Encryption
on and off using the toggle switch.
Checking the encryption is turned on for Recorded Files in Video SERVER on the
Encoder In the encoder you will now see Encryption Status Enabled.
If you now go to the recorded files on the encoder you will note they are encrypted = .avi.enc
The process to download and Decrypt via V264 Player First you must set up the secret keys in V264 itself. Go to Cleopatra, file and export secret key to your desktop.
Then go to V264 Player, Options and Encryption tab and Import Keys, then import the secret key you have just
saved to your laptop.
15
When you come to download the files you will be asked to enter the passphrase to decrypt the files straight to
your computer.
You will now be able to play this immediately into windows media player or VLC.
ENCODER COMPLETE
The encoder will be added to the VSS Stream window and also show details including the Encoder Name and
ID, encryption and how many connections are current.
Last Connected time has been added in V3.7.11 to the encoders in the main Streaming Server UI. When an
encoder is connected, it represents the time of connection. Where an encoder is not connected it represents
the last time the connection was active.
16
Indicator Lights The Indicator representing the encoder can be in one of two states:
Yellow
Yellow light means that the stream channel is configured and open but there is no encoder connected.
Green
When an encoder successfully connects to the stream, the light will turn to green. This light represents the
status of an encoder and can be used as a primary indicator of whether a remote encoder is connected.
Connection Notifications
If you have set up e mail notifications for connections an email will be sent to the email address set up with
that encoder. This can be used by users and administrators to know when a remote encoder is online and
ready to transmit video, or has gone offline.
CHANGING ENCODER DETAILS
Click and highlight the desired stream in the streams window and then click ‘Edit Stream’ button.
To delete any of the existing streams.
Click and highlight the desired stream in the streams window. Click ‘delete stream’.
USERS
Users represent operatives who want to view live video streams through the Vemotion Streaming Server. By
default there are no users added to the system.
To input users, click users and then add, edit or delete a user.
For each user, a username and password must be configured in the server and these must be used in the
Vemotion viewer application in order for the user to be able to access and view video streams.
17
1 & 2 will enable/disable the local recording/snapshot buttons in an upgraded V264Player. Default permission
is granted.
1 & 2 effect the ability to use snapshot and recording on the V264 player (recording on laptop running V264
not on the encoder it is connected to). So directly effecting the following buttons top right of video stream
3 allows a user with this permission to toggle encryption recording on/off (recording and encrypting files on
the encoder), providing the server is licensed to allow PGP encryption.
Default for this is permission not granted, unless an admin.
V264 PLAYER turning Encryption of recorded files on and off Toggle has just been added to a menu in V264Player, as shown below.
18
(You can’t generate/assign keys like you can on the Streaming Server Just toggle encryption on/off if a key has
already been configured)
Add User
Name
This is the username that a user will need to access video streams.
Password
This is the password that a user will need to access video streams. If required a random password can be
generated by clicking the Randomise button.
Default Stream
When connecting to the server using a Vemotion Viewer, the user can opt to connect to a specific video feed, if
they are allowed to, or the ‘Ops Channel’ if a default stream is specified.
19
When connecting to the ‘Ops Channel’, the video feed presented to the user upon connection is called the
‘Default Stream’ and is set using this option. Select an appropriate video stream.
When connected to the Ops Channel, the feed that the user is watching can be changed dynamically by the
Vemotion Stream Manager application.
Note: To allow the user access to the Ops Channel, set a default stream. If no default stream is set, the Ops
Channel will not be presented to the user for selection.
PERMISSIONS
Set up here what you wish you user to be able to do with the cameras by ticking the relevant boxes
Encoder access This section allows you to control which users can connect and view which video encoders, if any. Users will
always be able to access non-restricted video streams. (See adding video stream – Authentication required
option).
To allow a user access to a particular restricted video encoder, check the checkbox next to the encoder name.
To remove access from the user, uncheck the relevant box.
To allow access to all streams tick select all box
Note: If the user is not allowed access to any restricted streams and there are no unrestricted streams on the
system and the user does not have a default stream set, then they will see no video streams and be unable to
view any video. Once added the user will be visible in the users page.
20
CLIENTS
The Clients window of the VSS shows details of Vemotion Viewers and Vemotion Managers connected to the
VSS. The columns are as follows;
Connected Shows the time and date that a connection was made
Encoder Shows the video encoder that the user has connected to
User Shows the user who has connected to a video encoder
Address Shows IP address of the connection
Encryption This shows if the link is encrypted or not
CLIENT LICENCES
In order for a user to view video through the Vemotion system, they must install and run a Vemotion Player
application or Viewing ‘client’. The Viewing Client in most cases will not require a licence in order to run (see
Viewer support guides).
Multiple Vemotion Players can be loaded and run unlicensed and the administrator must set up who can view
what streams. When unlicensed viewers are enabled there are only certain seats on the server available in
order to view streams, i.e if only 5 concurrent viewing slots on the server, only 5 people can access the server
streams at any one time. However there may be need that a specific Client will need guaranteed access at all
times and therefore a license can be allocated to a certain device, i.e laptop or PC. That particular device will
always have access to every video stream and are not part of the shared seats on the server.
Furthermore, the licence for each guareenteed viewing client needs to be added to the VSS, this means that
the VSS can allow access to the system at all times. To add, edit or delete a client licence · Click on Client
Licences and add license. The following window will be displayed;
21
Add in the Computer name the serial Mac Address and the Multi channel stream plus description, followed by
the license;
Click Ok and this will be added to your list of client licenses. This license can then be used to license the specific
laptop which is used for administrator purposes.
Licences can be changed or updated by clicking on the ‘Edit licence’ button or can be deleted by clicking the
‘delete licence’ button.
Note. If the client licence does not exist in the Client licences list then the relevant client application will not be
granted access to the server and the user will not be able to view any video.
ENCODER LICENCES
These are similar to client licences but relate to video encoders VB-10, VB-20, VB-30 and VB-40 products. Each
Vemotion video encoder must have a unique licence associated with it. This is managed by Vemotion.
To add, edit or remove an encoder licence the same procedure as client licenses should be followed. For more
information about licences please contact your system administrator or contact Vemotion support.
ABOUT
Click the ‘About’ button for information about the Vemotion Server software installed on the machine as
shown below. The number and type of encoders and the number of un-licenced clients available on the VSS is
shown.
22
Different licence types have been introduced for encoder connections. These are VB-10, VB-22, VB-3X and
Unrestricted. When adding/editing an encoder you must specify which type of encoder licence you are using
(from your pool of available licences).
An unrestricted licence will allow any of the other types of encoder to connect.
Future versions of encoders will specify what type of encoder they are, on connection to the server, so that
this licence type check can be enforced.
Click the ‘Licence Details’ button to show the Licence Key Activation Window. This displays the machine’s MAC
address and the licence key details.
If the Licence requires an update;
• Highlight and Delete the current Licence Key
• Paste in the new Licence Key received from Vemotion
23
• Click the ‘OK’ button in both boxes to exit ‘About’.
STREAMING SERVER CONFIG
Streaming Server Config allows the administrator to set up various options within the server.
To access this please go to C:\Program Files (x86)\Vemotion\StreamingServer & open StreamingServerConfig
The following options are made available;
Each Option is outlined below, any changes made you will be asked if you wish to make the changes and if so
the Vemotion Streaming Server will save changes and restart;
24
General This allows you to name the Streaming Server Window, and sort the streams alphabetically. It will also allow
you to set the time either by your local time or UTC. UTC, is the primary time standard by which the world
regulates clocks and time. It does not observe daylight saving time.
Single Instance is for Vemotion use only.
No delay is for Vemotion use only.
Allows you to set an Ops channel up.
Activity log retention is set to 7 days as default. This allows you to be able to view who has logged on and
when. If UAC is disabled on the server machine there will be activity log files in the Streaming Server
installation folder. C:\Program Files (x86)\Vemotion\StreamingServer to look like:
Now edit with Notepad to view
If UAC is enabled they will be in C:\Users\<user>\AppData\Local\VirtualStore\Program Files
(x86)\Vemotion\StreamingServer
E Mail
Server – is a Simple Mail Transfer Protocol (SMTP) email forwarding server and can be on the local host or
network. This will email alerts, disconnect and alarms from encoders to an address for your choice.
Port – default port for SMTP.
SSL - email encrypted when transmitted or not.
User and Pass - Some e mail servers require authentication so user and pass are added in case they are
required.
25
From – so the end user can see who the mail is form.
Errors - If errors are occurring and emails are not being sent an admin address can be added.
Disconnect - If email can’t be sent within a time period, in this case 8 secs, it will not try again.
Max stream notifications limits how many you can get a day.
SSL Certificate SSL Certificate allows you to set up Encryption on the server and therefore allow a secure transmission from
encoder to the server or server to viewer.
There is the option to use any Certificate Options that already exist on the server or you have created, or use a
self-signed Certificate.
Select which option you wish, if not self-signed you will have to select from the options given once the Use SSL
Certificate has been ticked. Select the Certificate you wish to use and press ok. A pop box will ask if you can
restart the server for the Certification to be applied. Press Ok.
If you are using SSL certificates the connection and corresponding validation of the certificate chain will be
done in the following ways,
• The certified chain is a trusted validated chain and starts and ends with the root certificate containing
both the public and private key.
• On initial connection to the server the ‘public’ client checks the certificate from the server is valid by
checking the trusted root certificate.
• The certificate from this server is then checked that it is the host that the client expects to be
connected to.
26
• The certificate authority and validation forms part of a trusted chain which is validated and secure.
If you are not familiar with setting up your own certificates using a trusted certificate authority, please contact
Vemotion directly. Vemotion can take you through how to set up the link to establish an encrypted secure
method of transmission using TLS and secure certificate exchange. You have options on how to administer
your certificates depending on whether you are on a private network with no access to the internet or if you
have access to the internet.
Previous streaming server only supported TLS 1.0, which was not compatible with latest iOS/android software.
(which requires TLS 1.2) Option to allow all modes (TLS 1.0, 1.1 and 1.2) is the default for compatibility reasons
with old mobile clients. New installations of streaming server could be configured to just allow the more
secure TLS 1.2 and disable 1.0 and 1.1. The change is the protocol used for the secure communication and
makes no difference to the certificate, whether that be a 3rd party purchased or self-signed. The updated TLS
also requires Windows 7/Windows Server 2008 R2 or above.
Now go to Ports to finish SSL set up.
Ports Ports are pre-set in Vemotion software. Players are 4444 unencrypted and 5555 encrypted. Encoders are 8000
unencrypted and 8001 encrypted. If no encryption has been enabled with an SSL certificate then 5555 and
8001 will not be greyed out and unusable.
Once the SSL certificate has been set up, Player and Encoder ports will no longer be greyed out and you can
tick both to enable secure ports.
27
Once you have ticked both secure ports press ok, the Server will restart and SSL is enabled. On the Streaming
Server page, Streams and Connections will now have all ports listed. Encoders can be connected if encrypted
or unencrypted depending on how they are set up.
Encoder For Vemotion Use only
Player For Vemotion Use only
Alert Saver For Vemotion Use Only
Mode – Master and Slave Servers Mode allows you to set up the server as a Master or a Slave in dual server installations. This can be used in
conjunction with network load balancing and is the customer’s responsibility to handle the IP traffic. The
Network traffic will always be directed to the Master unless it becomes unavailable, in such cases the network
traffic will divert to the Slave, this is dependent on how the network infrastructure is set up.
Outputs These are for use with other 3rd party integrations and bespoke. Contact Vemotion for more information.
28
Saving Files Saving Client licenses and config.dat file for Streaming server to transfer to another server – client licenses and
config.dat
If the app data cannot be seen you need to go to the top tab, hit view and tick hidden items
C:\users\whoever you are logged on
as\appData\local\Virtualstore\Programfiles(x86)\Vemotion\StreamingServer
Once done you will have to update all encoders to the correct VB license ie VB3x
Server recording This allows connected encoders to be recorded on the server at the quality they are set at on the encoder
(please note this does use data and bandwidth)
In streaming server click options on the main screen and you will have the option for recording (requires
version 3.9.31 or higher) as well as the correct licence
Here you can set the save file location, duration in minutes of files and any retention periods. Once these are
set you can turn recording on or off via the record button the main screen as shown below.
If any more info is required please contact Vemotion – +44 (0) 8444 906 906 or [email protected]
~ End of Document ~