Approving a camera’s self-signed certificate (Web UI)

If your browser permits self-signed server certificates, this procedure guides you to compare the Issued By and Subject properties of this certificate before you manually approve the connection.
Prerequisites: You do not have a server certificate for the camera that was signed by a valid root CA certificate.
  1. Accept the self-signed certificate and make a connection to the camera.
  2. To locate the certificate do one of the following:
    • Using the web UI, navigate to Controller (System) Setup > Remote Devices > Certificate Management.
    • Using Workbench navigate to Station > Services > PlatformServices > CertManagement.
    The station opens the Certificate Management view.
  3. To acknowledge the security warning, click Allow and click the Allowed Hosts tab.
  4. To open the certificate, select it and click View.
    The Host Exemption window opens.
  5. Confirm that the certificate’s Issued By and Subject properties contain names you recognize, and click Ok.
    For a self-signed certificate, these properties should be the same. They should contain the name of the camera manufacturer or other identifiable text.
     CAUTION: If you do not recognize the value of these properties, you may need to investigate with the camera manufacturer. This certificate authenticates the camera as a valid video server. Approving a bogus certificate opens your system to a man-in-the-middle attack. 
  6. Assuming that the certificate is valid, and, if the certificate has not been approved yet, click Approve and respond to the confirmation window by clicking Yes.
    The web UI’s Camera Manager view lists the camera.