About your device AXIS S3016 Recorder is a network video recorder with integrated PoE switch and surveillance-class hard drives. It also includes a USB 3.0 port for easy export of video footage. The recorder comes in three models – 8 TB, 16...
Open the device's web interface Open a browser and type the IP address or host name of the Axis device. If you do not know the IP address, use AXIS IP Utility or AXIS Device Manager Extend to find the device on the network.
Make sure that no one has tampered with the device software To make sure that the device has its original AXIS OS, or to take full control of the device after a security attack: Reset to factory default settings. See .
AXIS S3016 Recorder To make your My Axis account more secure, activate multi-factor authentication (MFA). MFA is a security system that adds another layer of verification to ensure the user’s identity. To activate MFA: Go to axis.com/my-axis/login. Log in with your My Axis credentials.
The configuration can take several minutes. Install the mobile app With AXIS S3016 Recorder mobile app, you can access your devices and recordings from anywhere. You can also get notifications when events occur, or when someone calls from an intercom.
Use the default settings and click Next. Set your password for storage encryption. Click Next. You need this password to access the recorder hard drive outside AXIS Camera Station or when the recorder is reset to factory default settings from the device’s web interface.
This makes sure that all of the connected devices will be powered. Example: In this example: • AXIS S3016 Recorder has a total power budget of 305 W. • PoE class 3 device. Requests 15.5 W power but actually consumes 7.5 W power. •...
AXIS S3016 Recorder The status message appears in the upper-right corner. Wait until the operation is done and RAID configured is shown before closing the page. Replace a hard drive Note To avoid electrostatic discharge, we recommend that you always use a static mat and static strap while working on components in the interior of the system.
Page 10
AXIS S3016 Recorder 6.1. Go to the device’s web interface. 6.2. Go to System > Storage and click Mount. 6.3. Enter the encryption password used when encrypting the hard drive.
Status Device info Shows the device information, including AXIS OS version and serial number. Upgrade AXIS OS: Upgrade the software on your device. Takes you to the Maintenance page where you can do the upgrade. Time sync status Shows NTP synchronization information, including if the device is in sync with an NTP server and the time remaining until the next sync.
Page 12
Shows what kind of access to the device that is active, what encryption protocols are in use, and if unsigned apps are allowed. Recommendations to the settings are based on the AXIS OS Hardening Guide. Hardening guide: Link to AXIS OS Hardening guide where you can learn more about cybersecurity on Axis devices and best practices.
Storage: Show recordings based on storage type. Apps Add app: Install a new app. Find more apps: Find more apps to install. You will be taken to an overview page of Axis apps. Allow unsigned apps : Turn on to allow installation of unsigned apps.
Page 14
AXIS S3016 Recorder The time format depends on the web browser’s language settings. Note We recommend you synchronize the device’s date and time with an NTP server. Synchronization: Select an option for the device’s date and time synchronization. • Automatic date and time (manual NTS KE servers): Synchronize with the secure NTP key establishment servers connected to the DHCP server.
Page 15
AXIS S3016 Recorder Assign IPv4 automatically: Select to let the network router assign an IP address to the device automatically. We recommend automatic IP (DHCP) for most networks. IP address: Enter a unique IP address for the device. Static IP addresses can be assigned at random within isolated networks, provided that each address is unique.
Page 16
Specify all subdomains in a specific domain, for example .<domain name>.com One-click cloud connection One-click cloud connection (O3C) together with an O3C service provides easy and secure internet access to live and recorded video from any location. For more information, see axis.com/end-to-end-solutions/hosted-services.
Page 17
AXIS S3016 Recorder Allow O3C: • One-click: This is the default setting. Press and hold the control button on the device to connect to an O3C service over the internet. You need to register the device with the O3C service within 24 hours after you press the control button.
Page 18
– Authentication failed: Sends a trap message when an authentication attempt fails. Note All Axis Video MIB traps are enabled when you turn on SNMP v1 and v2c traps. For more information, see AXIS OS Portal > SNMP. • v3: SNMP v3 is a more secure version, which provides encryption and secure passwords. To use SNMP v3, we recommend you to activate HTTPS, as the password is then sent through HTTPS.
AXIS S3016 Recorder Network ports Power over Ethernet • Allocated power: Number of watts (W) that are currently allocated. • Total PoE consumption: Number of watts (W) that are consumed. • Keep PoE active during recorder restart: Turn on to supply power to connected devices during a restart of the recorder.
Page 20
Secure keystore: Select to use Trusted Execution Environment (SoC TEE), Secure element or Trusted Platform Module 2.0 to securely store the private key. For more information on which secure keystore to select, go to help.axis.com/en-us/axis-os#cryptographic-support. • Key type: Select the default or a different encryption algorithm from the drop-down list to protect the certificate.
Page 21
When configured without a CA certificate, server certificate validation is disabled and the device tries to authenticate itself regardless of what network it is connected to. When using a certificate, in Axis' implementation, the device and the authentication server authenticate themselves with digital certificates using EAP-TLS (Extensible Authentication Protocol - Transport Layer Security).
Page 22
Custom signed AXIS OS certificate To install test software or other custom software from Axis on the device, you need a custom signed AXIS OS certificate. The certificate verifies that the software is approved by both the device owner and Axis. The software can only run on a specific device which is identified by its unique serial number and chip ID.
Page 23
AXIS S3016 Recorder Add account: Click to add a new account. You can add up to 100 accounts. Account: Enter a unique account name. New password: Enter a password for the account. Passwords must be 1 to 64 characters long. Only ASCII printable characters (code 32 to 126) are allowed in the password, for example, letters, numbers, punctuation, and some symbols.
Page 24
AXIS S3016 Recorder Add virtual host: Click to add a new virtual host. Enabled: Select to use this virtual host. Server name: Enter the name of the server. Only use numbers 0-9, letters A-Z, and hyphen (-). Port: Enter the port the server is connected to.
Page 25
AXIS S3016 Recorder The list shows all the recipients currently configured in the product, along with information about their configuration. Note You can create up to 20 recipients.
Page 26
AXIS S3016 Recorder Add a recipient: Click to add a recipient. Name: Enter a name for the recipient. Type: Select from the list: • – Host: Enter the server's IP address or hostname. If you enter a hostname, make sure that a DNS server is specified under System >...
Page 27
ECDSA, ED25519, and DSA. Make sure to enter the right MD5 host key that is used by your SFTP server. While the Axis device supports both MD5 and SHA-256 hash keys, we recommend using SHA-256 due to stronger security over MD5. For more information on how to configure an SFTP server with an Axis device, go to the AXIS OS Portal.
Page 28
AXIS S3016 Recorder – POP authentication: Turn on to enter the name of the POP server, for example, pop.gmail. com. Note Some email providers have security filters that prevent users from receiving or viewing large amount of attachments, from receiving scheduled emails and similar. Check the email provider's security policy to avoid your email account being locked or missing out on your expected emails.
Page 29
AXIS S3016 Recorder RAID • Free: The amount of free disk space. • Status: If the disk is mounted or not. • File system: The file system that is used by the disk. • Encrypted: If the disk is encrypted or not.
Page 30
AXIS S3016 Recorder Remote system log Syslog is a standard for message logging. It allows separation of the software that generates messages, the system that stores them, and the software that reports and analyzes them. Each message is labeled with a facility code, which indicates the software type generating the message, and assigned a severity level.
Note All Axis device software is digitally signed to ensure that you only install verified software on your device. This further increases the overall minimum cybersecurity level of Axis devices. For more information, see the white paper “Axis Edge Vault” at axis.com.
AXIS S3016 Recorder Troubleshoot Reset PTR : Reset PTR if for some reason the Pan, Tilt, or Roll settings aren’t working as expected. The PTR motors are always calibrated in a new camera. But calibration can be lost, for example, if the camera loses power or if the motors are moved by hand.
For in-depth information about cybersecurity in AXIS OS, read the AXIS OS Hardening guide. Signed OS Signed OS is implemented by the software vendor signing the AXIS OS image with a private key. When the signature is attached to the operating system, the device will validate the software before installing it. If the device detects that the integrity of the software is compromised, the AXIS OS upgrade will be rejected.
AXIS S3016 Recorder Specifications Product overview 1 USB 3.0 port 2 Product status LED 3 Hard drives status LEDs 4 PoE/Network status LEDs 5 Power connector 6 PoE ports 7 AUX RJ45 port 8 LAN RJ45 port 9 LAN SFP port 10 USB 2.0 port...
AXIS S3016 Recorder Hard drive status Green The drive is online. Amber This drive is online, but another drive is broken. The RAID is missing redundancy. The drive is broken. All are red The RAID has failed. System is not recording.
AXIS S3016 Recorder Control button The control button is used for: • Resetting the product to factory default settings. See . • Connecting to a one-click cloud connection (O3C) service over the internet. To connect, press and hold the button for about 3 seconds until the status LED flashes green.
Check that the cameras are connected to the same network as the computer, unless you are remote. Still not working? Make sure that your cameras, recorder and AXIS Companion desktop app have the latest firmware and software updates. See .
Page 38
If you set a password for the product during configuration, and later add that product to a site, you can no longer log in to the product's web interface with the password you've set. This is because AXIS Companion software changes the passwords of all devices in the site.
AXIS S3016 Recorder Need more help? Useful links • AXIS Companion user manual • AXIS Camera Station user manual Contact support If you need more help, go to axis.com/support.
Need help?
Do you have a question about the S3016 and is the answer not in the manual?
Questions and answers