CAMNET
cmdline switches
Camnet Service Manager client
                     The following SSL switches pertain to the client to CAMNET server connection

      -ssl *         One or more of the following:

           on        The default (the client and server must agree on either using ssl or not using ssl)
           off       Do not use ssl when connecting to CAMNET server  (e.g., -ssl off)

           -siem #   # is the sum of the following security ignore values (default is 4096 + 256)

                       128  SECURITY_FLAG_IGNORE_REVOCATION
                       256  SECURITY_FLAG_IGNORE_UNKNOWN_CA           (default)
                       512  SECURITY_FLAG_IGNORE_WRONG_USAGE
                      4096  SECURITY_FLAG_IGNORE_CERT_CN_INVALID      (default)
                      8192  SECURITY_FLAG_IGNORE_CERT_DATE_INVALID

                      for example: -ssl -siem 0x1100   (the -ssl switch must be present for -siem)


      -xmit #        # is 0 to 255, default is 1
                     This is the amount of comm data to encrypt when transmitting data from this
                     client to CAMNET server.  -xmit has no effect on SSL channel encryption.
                     Each unit accounts for another 256 bytes of the packet to encrypt.
                     -xmit 255 encrypts the entire packet sent.

                     Connections over 127.0.0.1 do not use SSL; xmit at 0 is also used


      -lan           Start the same as if the System, LAN/WAN panel was set to LAN
      -wan           Start the same as if the System, LAN/WAN panel was set to WAN


      -up user pass  Supply the username and password for CAMNET server to bypass the logon dialog


      -noawaymode       If the client should allow the computer to go to deep sleep use this switch
      -nodisplayneeded  If the display monitor does not need to be kept on include this switch
                        (some portable devices will always sleep if the display is allowed to go off)


      -mf sw         Use software for all Media Foundation decoding and rendering
      -mf np         Use software decoding for baseline H.264 w/o constrained set flag stream


      -mip           Enable mouse in pointer mode

CAMNET server

      -service       Interface with CAMNET server as a service
      -console       Interface with CAMNET server as a console application

      -service <mode> pick one of the following commands for mode:

                     install        also performs a service start
                     installonly
                     start
                     stop
                     remove         also performs a service stop

                     Any service command requires elevating to admin


      -service and -console options:

        -name s      s is the service/console name to install/use
                     The default name is camnetserver

        -addr #      # : control listen host or ip addr, def. is INADDR_ANY (0.0.0.0)

        -port #      # : control listen port, def. is 4040

                     port +0 is the admin port - admin account has full access to CAMNET server
                     port +1 is the non-admin port - access to CAMNET server is restricted, e.g., no Cam setup or System access
                     port +2 is the HTTP event server
                     port +3 is the TCP event server
                     port +4 is reserved
                     port +5 is the FTP event server
                     port +6 is the Onvif event server
                     ports +7 to +15 are reserved

        -ssl  *      One or more of the following:
                     
                     on        The default (the server and client must agree on either using ssl or not using ssl)
                     off       Do not use ssl when connecting to CAMNET server (e.g., -ssl off)
                               on is the default (-ssl on)

                     The following require -ssl to be present, e.g.:  -ssl -scn 10.1.2.3 -sfly 1

                     -scn cn     cn is the common name
                     -sacl #     # is 0 by default; set to 1 to authenticate the client
                     -sloc #     # is 0 by default; the store location

                                    1  CERT_SYSTEM_STORE_CURRENT_USER_ID
                                    2  CERT_SYSTEM_STORE_LOCAL_MACHINE_ID
                                    4  CERT_SYSTEM_STORE_CURRENT_SERVICE_ID
                                    5  CERT_SYSTEM_STORE_SERVICES_ID
                                    6  CERT_SYSTEM_STORE_USERS_ID
                                    7  CERT_SYSTEM_STORE_CURRENT_USER_GROUP_POLICY_ID
                                    8  CERT_SYSTEM_STORE_LOCAL_MACHINE_GROUP_POLICY_ID
                                    9  CERT_SYSTEM_STORE_LOCAL_MACHINE_ENTERPRISE_ID

                     -sstn a     a is empty by default; set to the store name
                     -stof #     # is empty by default; set to the timeout multiplier (10=1.0x, 15=1.5x)

                                 The default timeout values for SSL connections, which differ from
                                 the normal Cam setup, Timeout panel settings, are:

                                       connect: 10 seconds
                                          send:  5
                                       receive: 10

                                     -stof 20 doubles (2.0x) the above timeout values

                     -sfly #     # is 0 by default; set to the create-self-cert-on-the-fly mode

                                    0  create a self-signed cert if no suitable cert can be found
                                    1  always create a self-signed cert
                                    9  never create a self-signed cert

                                 -ssl -sfly 1 is faster if a self-signed cert is always used

                     -siem #     # is 256 by default   SECURITY_FLAG_IGNORE_UNKNOWN_CA
                                 see the client's -siem list above for the other possible values


        -xmit #      # is 0 to 255, default is 1
                     This is the amount of comm data to encrypt when transmitting data from the
                     CAMNET server to the client.  -xmit has no effect on SSL channel encryption.
                     Each unit accounts for another 256 bytes of the packet to encrypt.
                     -xmit 255 encrypts the entire packet sent.

                     Connections over 127.0.0.1 do not use SSL; xmit at 0 is also used


        -base b      b is the base path for all CNS-created files
                     The default is the install directory, e.g., c:\camnet

                     To locate individual camera recordings use the Cam setup, Record panel,
                     the Recording base file path field.


        -xc   o      o is the transcode override mode: hw, sw, hw1, hw2, hw3, hw4
                     hw typically finds the correct Intel GPU adapter
                     sw uses software for transcoding
                     hw1 to hw4 are used to manually select the Intel GPU adapter

                     This is for transcoding only, which is done by the server for the
                     benefit of the client.  Recordings are not transcoded when written
                     to disk, however exported excerpts of recordings can be.  See
                     Recordings, Export and also see Cam setup, Playback panel.
                

      -service options:

        -delay #     # is the seconds to delay at start, 0 to 120
                     The default is 15 seconds

        -acct a      a is account name to use; the default is "NT AUTHORITY\LocalService"
        -pass p      p is the account password

                     Instead of using -acct and -pass, use the Service properties, Log On dialog
                     so to not expose any password

      -console option:

        -min         start minimized
                     This is the same as -min 1; use -min 2 to restore the console state at exit
      


      Except for -name, -service mode options can be used only for a new install or installonly.

      When run as a service, I/O to NAS requires other than the default account (LocalService)
      since this account will not have permission to read or write to the external NAS.  Use an
      existing account that has access to the NAS for R/W, or create a new account for that
      purpose.
      
      When run as a service do not use mapped drives (e.g,  net use x: \\nas\share) for any
      pathnames; instead use the UNC share name (e.g., \\nas\share).