CameraStack
TLS Manager.

CameraStack TLS Manager is a desktop application for giving network cameras a proper TLS identity, and for keeping that identity healthy. It speaks the standard ONVIF Advanced Security service and the TLS Configuration Add-on, so it works with CameraStack Server and with other cameras that implement the same operations. It discovers local ONVIF cameras and keeps the connection panel and long-running operation progress visible.

What it does

• Inspect keys, certificates, certification paths, TLS server assignments and live HTTPS state.
• Create, verify and renew self-signed identities.
• Adopt an existing certificate without changing the camera.
• Create a camera-held key and CSR for your private Certificate Authority, then validate and atomically activate the certificate the CA returns. The private key never leaves the camera.
• Diagnose every advertised secure transport: HTTPS, snapshots, RTSP over HTTPS, secure WebSocket and native rtsps://.
• Store passwords and accepted certificate pins in the operating-system vault.
• Preview dependency-aware cleanup before deleting anything.
• Export a sanitized support bundle.
• Disable plain HTTP only after repeating the secure-management checks.

TLS Manager does not contain a production Certificate Authority. It exports the CSR for the CA software your organisation already runs, then resumes from a non-secret journal when the issued certificate is ready.

The self-signed alternative

For one private-network camera with one self-signed identity, the ONVIF TLS Self-Signed Configurator is smaller and scriptable. The two tools use the same standard ONVIF objects, so a camera configured with one can later be inspected, renewed or migrated with the other.

Downloads

Version 0.2.2. Each archive contains the application, the manual (as README.md), and full third-party licence notices.

Verify a download against its published SHA-256 checksums.

The Windows build is not code-signed yet, so SmartScreen may warn on first run. See the manual for usage.