Downloads for the current version are on the TLS Manager page.
0.3.1 (2026-11-03)
Stronger TLS key choices, with compatibility for older cameras, and Media Signing setup, enrolment and renewal in the desktop application.
TLS
- Added RSA-3072 and P-384 TLS identities alongside RSA-2048 and P-256, the key types introduced in version 2.0 of the TLS Configuration Add-on. Automatic self-signed setup selects a supported key type from the camera’s capabilities, and healthy existing certificates are retained. CA enrolment keeps RSA-2048 as its default and offers all four choices.
- Improved ECC certificate enrolment and verification. The camera key and the issuing CA can use different algorithms, such as an RSA CA signing a P-384 camera certificate. The camera’s private key stays on the camera.
- Added inspection of the camera’s ONVIF Add-on tokens, including the TLS Configuration Add-on version 2.0 token. Older cameras that do not advertise it keep working as before.
- Activation now waits for the setup duration the camera reports, within a bounded limit.
Media Signing
- Added Media Signing controls: inspect the factory and customer signing identities, enable signing on a supported video encoder, and enrol or assign a customer’s CA-issued signing certificate. Signing keys can be RSA-2048 or P-256.
- Added signing-certificate renewal, with either a new key or reuse of the assigned customer key where the camera permits it. Saved journals support recovery, and cleanup previews keep shared, assigned or otherwise unproven objects.
Other
- Updated to Go 1.26.10 with patched networking libraries.
- Release archives now include the source of the MPL-licensed dependency alongside the third-party notices.