#Blue iris security update#
#Blue iris security android#
#Blue iris security software#
#Blue iris security password#

#Blue iris security password#

This seems to work the best for our environment.ĭelayed start of BI service may work however, but it is untested my end.Īs for the sitting at a password screen, the server should be up. If you need some help configuring this, I’m happy to help.

The group policy applies reg edits to allow a service account to automatically log in.

#Blue iris security software#

In this times, it can be easy to get with the right software solutions. I currently have a work around, leveraging a group policy applied to the OU the server is housed in for blue iris, and a scheduled task on the server to launch blue iris on start up. Security is the most important thing for every human being. I have a feeling that the Blue Iris service just launches before the Zerotier service is up and running, in turn forcing the only option for HTTP out to be your actual IPV4 This seems to only be a problem if you are running blue iris as a service. Anytime the server reboots, as blue iris launches it will bind the IPV4 for the actual network adapter, NOT the IPV4 of the zero tier virtual adapter. The problem I found, is when running blue iris as a service. While searching for a proper fix- I found your post.

#Blue iris security android#

Later versions of the BI app on Android are now configured to trust certificates installed in the User certificate store, which allows the use of non-publicly signed certificates once the phone is configured properly.I recently deployed blue iris in a enterprise environment as well. This describes the problem in the Android app which I worked with the BI folks to resolve. Reddit search is a little wonky today, but regarding the support for self-signed certificates, I was able to find the follow post on the topic: The channel is dedicated to teaching about the software called Blue Iris, made for security cameras and surveillance of your home or office. This is a somewhat more complicated approach than simple self-signed certificates (although not prohibitively so), which provides easier trust management. In my environment, my BI server certificates are signed by a private CA which I run. Regarding self-signed certificates, self-signed certificates are a subcategory of privately signed certificates, which are certificates signed by a non-public certification authority (CA).

(For example, in my networks, which are entirely personal/non-corporate, a VPN-only solution does not provide adequate security). This lets each user decide which option has the right cost / security trade-off for their needs. However, I think that, even in the home network setting, a guide offering security advice should still outline all the best practice options, which in this case would include VPN + secure connections. The primary difference between corporate and home or personal networks is in what constitutes acceptable security policy, with home networks generally being more relaxed in this regard. This is common practice in corporate environments (those which utilize VPNs) and how I run all my BI servers. Typically, most people want the CAM's firewalled. The router and firewall will also kill performance. Indeed, using a VPN alone, while allowing unsecured BI access to anyone on the local network, has considerable security risks which can be avoided by using secure connections in conjunction with VPNs. If you have BI and the CAM's on different networks, you then need a vLAN capable router or firewall router to bridge them together, but then you might as-well not have them separate. Modern security practice expects that even entirely private servers are protected by certificates and secure connections. I think this option really shouldn't be presented as a simple either-or choice. You can also configure Blue Iris to automatically check for updates so you’ll always be up-to-date. This also means that this approach is not applicable to securing BI access on an intranet, which is probably worth pointing out as well. It enables business owners to view live or recorded videos using mobile applications and receive real-time security alerts via email, SMS, or phone call. One thing not adequately stated in this guide, which may trip some people up, is the requirement for a fixed public IP address. Blue Iris is a video security and webcam software which lets businesses manage security of employees, buildings, and assets through video surveillance and access control capabilities. This usage of AI results in fewer false alarms and improves the overall surveillance. This integration allows Frigate to analyze your camera feeds for specific objects or people, and alert you when it finds something. Since then, BI + stunnel with private certs has worked without problems (including UI3, the Android app and the iOS app). Frigate is a great alternative to Blue Iris, especially from an AI-detection standpoint since it uses OpenCV and TensorFlow. Earlier this year I worked with the BI developers to resolve an issue in the Android app that broke support for private CAs.

#Blue iris security update#

A couple of comments on your guide.Īs most of you know, the latest Blue Iris update killed self-signed certificatesĪctually, BI works fine with privately signed certificates.