https://camerastack.io/tools/Recent content in CameraStack Tools on CameraStackHugoen-gbhttps://camerastack.io/tools/tls-manager/manual/Mon, 01 Jan 0001 00:00:00 +0000https://camerastack.io/tools/tls-manager/manual/<p>CameraStack TLS Manager configures and checks HTTPS on ONVIF cameras. It can manage a simple self-signed certificate, enrol a camera-held key with your certificate authority, verify secure media transports, and clean up unused objects created by CameraStack TLS tools.</p> <p>The application never exports a camera private key. It keeps HTTP enabled while setting up or rotating a certificate. Disabling HTTP is a separate action with its own confirmation and recovery checks.</p>https://camerastack.io/tools/tls-manager/Mon, 01 Jan 0001 00:00:00 +0000https://camerastack.io/tools/tls-manager/<p>CameraStack TLS Manager is a desktop application for giving network cameras a proper TLS identity, and for keeping that identity healthy. It speaks the standard ONVIF Advanced Security service and the <a href="https://www.onvif.org/add-on/tls-configuration-add-on/">TLS Configuration Add-on</a>, so it works with CameraStack Server and with other cameras that implement the same operations. It discovers local ONVIF cameras and keeps the connection panel and long-running operation progress visible.</p> <figure class="arch-figure"> <img src="https://camerastack.io/images/camerastack-tls-manager.png" alt="CameraStack TLS Manager managing a self-signed camera identity" loading="lazy" decoding="async"> </figure> <h2 id="what-it-does">What it does</h2> <ul> <li>Inspect keys, certificates, certification paths, TLS server assignments and live HTTPS state.</li> <li>Create, verify and renew self-signed identities.</li> <li>Adopt an existing certificate without changing the camera.</li> <li>Create a camera-held key and CSR for your private Certificate Authority, then validate and atomically activate the certificate the CA returns. The private key never leaves the camera.</li> <li>Diagnose every advertised secure transport: HTTPS, snapshots, RTSP over HTTPS, secure WebSocket and native <code>rtsps://</code>.</li> <li>Store passwords and accepted certificate pins in the operating-system vault.</li> <li>Preview dependency-aware cleanup before deleting anything.</li> <li>Export a sanitized support bundle.</li> <li>Disable plain HTTP only after repeating the secure-management checks.</li> </ul> <p>TLS Manager does not contain a production Certificate Authority. It exports the CSR for the CA software your organisation already runs, then resumes from a non-secret journal when the issued certificate is ready.</p>