Sony SRG-X400 Operating Instructions Manual page 83

Notes
• When using the SSL function, always configure
the settings after setting the date and time of
the camera. If the date and time are not
correctly set, it may cause web browser
connection problems.
• Reload the window when you change the SSL
setting. Press the F5 key on the keyboard to
reload.
SSL
Function
Select [Enable] to use the SSL function.
When [Enable (Allow HTTP connection for some
clients)] is selected, both HTTP and SSL connections
are allowed. When [Enable] is selected, only SSL
connection is allowed.
When Internet Explorer is used
When SSL session is established,
right of the address bar on your web browser.
When you use SSL connection for the first time
When you use SSL connection only by setting the
SSL function to [Enable], you cannot access the
camera if the SSL function does not work properly.
In this case, you must reset the camera to the factory
settings. (All settings will be initialized.)
To avoid this, check that SSL connection is possible
by performing the following steps.
1
Set the SSL function to [Enable (Allow
HTTP connection for some clients)].
2
Click [OK] to close the web browser.
3
Display the viewer in SSL connection.
For details, see "When the SSL Function
is Used" (page 60).
4
After confirming that SSL connection is
possible, set the SSL function to
[Enable].
Even if the web browser is closed as SSL connection
is impossible, HTTP connection will be possible if
[Enable (Allow HTTP connection for some clients)] is
selected. First check the setting contents of SSL tab
in HTTP connection, then check the SSL connection
again.
If [Enable (Allow HTTP connection for some clients)]
is not selected, you will not be able to access the
camera when SSL connection becomes impossible.
In this case, press the reset switch on the camera for
5 seconds or longer to return to the factory default
settings. For details, see page 9.
SSL server authentication
appears in the
83
Note
SSL connection will load the camera down;
therefore, not all images may be downloaded, and
the mark may appear when the camera accesses
from the web browser. In this case, reload the
window. Press the F5 key on the keyboard to reload.
Certificate options
Select an installation mode of the certificate.
[Use an external certificate]: Uses the certificate
including private key information issued by a CA.
The PKCS#12 and PEM formats are supported.
Note
SSL is not available when [Certificate options]-[Use an
external certificate] is selected, or certificate and private
key password is not set properly even SSL is set to [Enable].
[Use a self-signed certificate (For test use)]: This
mode uses the certificate and private key pair
generated by "Self-signed certificate generation"
(page 84). Private key information corresponding
to the certificate is stored in the camera.
You do not need to install an external
certificate. However, you cannot execute the
existence proof that is one of the SSL
functions for the following reasons.
– The private key generated in the camera is
self-signed by the camera.
– A prepared value is set for a distinguished
name (Common name, etc).
– The certificate is not issued by a trusted CA.
For reasons of security, we recommend using
this mode only when there is no problem
even if perfect security is not ensured, such
as for operation test.
Notes
• When [Use a self-signed certificate (For
test use)] is selected, the [Security Alert]
dialog appears on the SSL connection with
a web browser.
For details, see "When the SSL Function is
Used" (page 60).
• SSL connection may be impossible due to
the type of certificate installed in the
camera. In this case, refer to "To import the
CA certificate" on page 86 and install.
• When [Use a self-signed certificate (For
test use)] is selected, you may not be able
to use SSL connection depending on the
web browser or OS you are using.
To import the certificate
Click [Choose File] to select the certificate to be
imported. Follow the on-screen instructions to
import the certificate to the camera.