Camnet Service Manager clientThe following SSL switches pertain to the client to CAMNET server connection -ssl * One or more of the following: on The default (the client and server must agree on either using ssl or not using ssl) off Do not use ssl when connecting to CAMNET server (e.g., -ssl off) -siem # # is the sum of the following security ignore values (default is 4096 + 256) 128 SECURITY_FLAG_IGNORE_REVOCATION 256 SECURITY_FLAG_IGNORE_UNKNOWN_CA (default) 512 SECURITY_FLAG_IGNORE_WRONG_USAGE 4096 SECURITY_FLAG_IGNORE_CERT_CN_INVALID (default) 8192 SECURITY_FLAG_IGNORE_CERT_DATE_INVALID for example: -ssl -siem 0x1100 (the -ssl switch must be present for -siem) -xmit # # is 0 to 255, default is 1 This is the amount of comm data to encrypt when transmitting data from this client to CAMNET server. -xmit has no effect on SSL channel encryption. Each unit accounts for another 256 bytes of the packet to encrypt. -xmit 255 encrypts the entire packet sent. Connections over 127.0.0.1 do not use SSL; xmit at 0 is also used -lan Start the same as if the System, LAN/WAN panel was set to LAN -wan Start the same as if the System, LAN/WAN panel was set to WAN -up user pass Supply the username and password for CAMNET server to bypass the logon dialog -noawaymode If the client should allow the computer to go to deep sleep use this switch -nodisplayneeded If the display monitor does not need to be kept on include this switch (some portable devices will always sleep if the display is allowed to go off) -mf sw Use software for all Media Foundation decoding and rendering -mf np Use software decoding for baseline H.264 w/o constrained set flag stream -mip Enable mouse in pointer mode
CAMNET server-service Interface with CAMNET server as a service -console Interface with CAMNET server as a console application -service <mode> pick one of the following commands for mode: install also performs a service start installonly start stop remove also performs a service stop Any service command requires elevating to admin -service and -console options: -name s s is the service/console name to install/use The default name is camnetserver -addr # # : control listen host or ip addr, def. is INADDR_ANY (0.0.0.0) -port # # : control listen port, def. is 4040 port +0 is the admin port - admin account has full access to CAMNET server port +1 is the non-admin port - access to CAMNET server is restricted, e.g., no Cam setup or System access port +2 is the HTTP event server port +3 is the TCP event server port +4 is reserved port +5 is the FTP event server port +6 is the Onvif event server ports +7 to +15 are reserved -ssl * One or more of the following: on The default (the server and client must agree on either using ssl or not using ssl) off Do not use ssl when connecting to CAMNET server (e.g., -ssl off) on is the default (-ssl on) The following require -ssl to be present, e.g.: -ssl -scn 10.1.2.3 -sfly 1 -scn cn cn is the common name -sacl # # is 0 by default; set to 1 to authenticate the client -sloc # # is 0 by default; the store location 1 CERT_SYSTEM_STORE_CURRENT_USER_ID 2 CERT_SYSTEM_STORE_LOCAL_MACHINE_ID 4 CERT_SYSTEM_STORE_CURRENT_SERVICE_ID 5 CERT_SYSTEM_STORE_SERVICES_ID 6 CERT_SYSTEM_STORE_USERS_ID 7 CERT_SYSTEM_STORE_CURRENT_USER_GROUP_POLICY_ID 8 CERT_SYSTEM_STORE_LOCAL_MACHINE_GROUP_POLICY_ID 9 CERT_SYSTEM_STORE_LOCAL_MACHINE_ENTERPRISE_ID -sstn a a is empty by default; set to the store name -stof # # is empty by default; set to the timeout multiplier (10=1.0x, 15=1.5x) The default timeout values for SSL connections, which differ from the normal Cam setup, Timeout panel settings, are: connect: 10 seconds send: 5 receive: 10 -stof 20 doubles (2.0x) the above timeout values -sfly # # is 0 by default; set to the create-self-cert-on-the-fly mode 0 create a self-signed cert if no suitable cert can be found 1 always create a self-signed cert 9 never create a self-signed cert -ssl -sfly 1 is faster if a self-signed cert is always used -siem # # is 256 by default SECURITY_FLAG_IGNORE_UNKNOWN_CA see the client's -siem list above for the other possible values -xmit # # is 0 to 255, default is 1 This is the amount of comm data to encrypt when transmitting data from the CAMNET server to the client. -xmit has no effect on SSL channel encryption. Each unit accounts for another 256 bytes of the packet to encrypt. -xmit 255 encrypts the entire packet sent. Connections over 127.0.0.1 do not use SSL; xmit at 0 is also used -base b b is the base path for all CNS-created files The default is the install directory, e.g., c:\camnet To locate individual camera recordings use the Cam setup, Record panel, the Recording base file path field. -xc o o is the transcode override mode: hw, sw, hw1, hw2, hw3, hw4 hw typically finds the correct Intel GPU adapter sw uses software for transcoding hw1 to hw4 are used to manually select the Intel GPU adapter This is for transcoding only, which is done by the server for the benefit of the client. Recordings are not transcoded when written to disk, however exported excerpts of recordings can be. See Recordings, Export and also see Cam setup, Playback panel. -service options: -delay # # is the seconds to delay at start, 0 to 120 The default is 15 seconds -acct a a is account name to use; the default is "NT AUTHORITY\LocalService" -pass p p is the account password Instead of using -acct and -pass, use the Service properties, Log On dialog so to not expose any password -console option: -min start minimized This is the same as -min 1; use -min 2 to restore the console state at exit Except for -name, -service mode options can be used only for a new install or installonly. When run as a service, I/O to NAS requires other than the default account (LocalService) since this account will not have permission to read or write to the external NAS. Use an existing account that has access to the NAS for R/W, or create a new account for that purpose. When run as a service do not use mapped drives (e.g, net use x: \\nas\share) for any pathnames; instead use the UNC share name (e.g., \\nas\share).