Motorola Avigilon H5A-FE Series User Manual page 18

1. Go to the Advanced Settings page.
2. In the Encryption Engine drop-down list, select the type of encryption to use:
OpenSSL is the default option for encryption.
l
FIPS 140-2 enables FIPS 140-2 level 1 encryption.
l
NXP Secure Element enables the onboard trusted platform module (TPM) to securely store
l
your encryption keys. Only cameras that come with the onboard NXP Secure Element TPM will
display this option.
CRYPTR micro enables the installed CRYPTR card to securely store your keys, meeting FIPS
l
140-2 level 3 requirements.
Important: Switching the setting to CRYPTR micro will cause the camera to generate a
new key and self-signed certificate. Some certificate and key management may be
required when you enable this setting. If your previous keys were signed by a
certificate authority (CA), the newly generated keys will also need to be signed by the
CA to keep the connection to your camera secure.
The Camera Configuration Tool (CCT) can be used to generate a Certificate Signing
Request (CSR) from the camera and to upload the signed certificate back to the
camera. For more information, see the Camera Configuration Tool User Guide.
3. Click Apply to save your settings.
Important: Changing this setting on your camera will require your camera to reboot and you
will lose the video stream for that time. Avigilon recommends that you apply this setting
during non-critical operating times.
Once CRYPTR encryption is enabled, you can access the CryptR Log page by selecting it in the side menu.
When the CRYPTR micro's internal audit log reaches 80% capacity, entries are automatically pulled from the
CRYPTR micro, logged to the camera's syslog, and the CRYPTR micro's audit log is cleared out. The CryptR
Log page will only show entries that haven't been logged to the camera's syslog yet.
Note: If the CRYPTR micro card is ejected or becomes unusable while it is inserted in the camera
and enabled, the camera will restart in FIPS 140-2 mode. If the card is re-inserted into the camera,
CRYPTR micro will need to be re-selected as the Encryption Engine to continue using the CryptR
micro card to store your keys.
Advanced Settings 14