Cybersecurity - Axis A1214 User Manual

AXIS A1214 Network Door Controller Kit
Learn more
Learn more

Cybersecurity

Signed firmware
Signed firmware is implemented by the software vendor signing the firmware image with a private key. When a firmware has this
signature attached to it, a device will validate the firmware before accepting to install it. If the device detects that the firmware
integrity is compromised, the firmware upgrade will be rejected.
Secure boot
Secure boot is a boot process that consists of an unbroken chain of cryptographically validated software, starting in immutable
memory (boot ROM). Being based on the use of signed firmware, secure boot ensures that a device can boot only with authorized
firmware.
Axis Edge Vault
Axis Edge Vault provides a hardware-based cybersecurity platform that safeguards the Axis device. It offers features to guarantee the
device's identity and integrity and to protect your sensitive information from unauthorized access. It builds on a strong foundation of
cryptographic computing modules (secure element and TPM) and SoC security (TEE and secure boot), combined with expertise in
edge device security.
Axis device ID
Being able to verify the origin of the device is key to establishing trust in the device identity. During production, devices with
Axis Edge Vault are assigned a unique, factory-provisioned, and IEEE 802.1AR-compliant Axis device ID certificate. This works
like a passport to prove the origin of the device. The device ID is securely and permanently stored in the secure keystore as a
certificate signed by Axis root certificate. The device ID can be leveraged by the customer's IT infrastructure for automated secure
device onboarding and secure device identification
To learn more about Axis Edge Vault and cybersecurity features in Axis devices, go to axis.com/learning/white-papers and search for
cybersecurity.
23