Skip to content

AdvancedSecurity

Security service implementation.

AdvancedSecurity

Bases: ONVIFService

0.0.1 2.4

Security service client.

Property Details
First introduced ONVIF 2.4 (August 2013)
Binding name AdvancedSecurityServiceBinding (ver10/advancedsecurity/wsdl/advancedsecurity.wsdl)
Operations advancedsecurity.wsdl
Spec Security

GetServiceCapabilities 

GetServiceCapabilities()

Returns the capabilities of the security configuration service.

The result is returned in a typed answer.

Output
  • Capabilities [Capabilities]
    The capabilities for the security configuration service is returned in the Capabilities element.
    • KeystoreCapabilities [KeystoreCapabilities]
      The capabilities of the keystore implementation.
      • MaximumNumberOfKeys - optional; [positiveInteger]
        Indicates the maximum number of private keys that the device can store simultaneously.
      • MaximumNumberOfCertificates - optional; [positiveInteger]
        Indicates the maximum number of certificates that the device can store simultaneously.
      • MaximumNumberOfCertificationPaths - optional; [positiveInteger]
        Indicates the maximum number of certification paths that the device can store simultaneously.
      • SetCertPath - optional; [boolean]
        Indicates support for modifying an existing certification path or certification path validation policy.
      • RSAKeyPairGeneration - optional; [boolean]
        Deprecated - Indication that the device supports on-board ECC key pair generation.
      • ECCKeyPairGeneration - optional; [boolean]
        Deprecated - Indication that the device supports on-board ECC key pair generation.
      • KeyPairGeneration - optional; [StringList]
        List of supported key algorithm like 'RSA' and 'ECC'. For a full list of definitions see tas:KeyPairAlgorithm.
      • RSAKeyLengths - optional; [RSAKeyLengths]
        Indicates which RSA key lengths are supported by the device.
      • EllipticCurves - optional; [EllipticCurves]
        Indicates which elliptic curves are supported by the device. Supported curve names can be found in the IANA TLS Supported Groups section, under the Description field.
      • PKCS10ExternalCertificationWithRSA - optional; [boolean]
        Deprecated - Indicates support for creating PKCS#10 requests for RSA keys and uploading the certificate obtained from a CA..
      • PKCS10 - optional; [boolean]
        Indicates support for creating PKCS#10 requests for keypairs and uploading the certificate obtained from a CA.
      • SelfSignedCertificateCreationWithRSA - optional; [boolean]
        Deprecated - Indicates support for creating self-signed certificates for RSA keys.
      • SelfSignedCertificateCreation - optional; [boolean]
        Indicates support for creating self-signed certificates.
      • X509Versions - optional; [X509Versions]
        Indicates which X.509 versions are supported by the device.
      • MaximumNumberOfPassphrases - optional; [nonNegativeInteger]
        Indicates the maximum number of passphrases that the device is able to store simultaneously.
      • PKCS8RSAKeyPairUpload - optional; [boolean]
        Deprecated - Indicates support for uploading an RSA key pair in a PKCS#8 data structure.
      • PKCS8 - optional; [boolean]
        Deprecated - Indicates support for uploading a key pair in a PKCS#8 data structure.
      • PKCS12CertificateWithRSAPrivateKeyUpload - optional; [boolean]
        Deprecated - Indicates support for uploading a certificate along with an RSA private key in a PKCS#12 data structure.
      • PKCS12 - optional; [boolean]
        Indicates support for uploading a certificate along with a private key in a PKCS#12 data structure.
      • PasswordBasedEncryptionAlgorithms - optional; [PasswordBasedEncryptionAlgorithms]
        Indicates which password-based encryption algorithms are supported by the device.
      • PasswordBasedMACAlgorithms - optional; [PasswordBasedMACAlgorithms]
        Deprecated - Indicates which password-based MAC algorithms are supported by the device.
      • MaximumNumberOfCRLs - optional; [nonNegativeInteger]
        Indicates the maximum number of CRLs that the device is able to store simultaneously.
      • MaximumNumberOfCertificationPathValidationPolicies - optional; [nonNegativeInteger]
        Indicates the maximum number of certification path validation policies that the device is able to store simultaneously.
      • EnforceTLSWebClientAuthExtKeyUsage - optional; [boolean]
        Indicates whether a device supports checking for the TLS WWW client auth extended key usage extension while validating certification paths.
      • NoPrivateKeySharing - optional; [boolean]
        Indicates the device requires that each certificate with private key has its own unique key.
      • SignatureAlgorithms - optional, unbounded; [AlgorithmIdentifier]
        The signature algorithms supported by the keystore implementation.
        • algorithm [DotDecimalOID]
          The OID of the algorithm in dot-decimal form.
          Pattern: [0-9]+(.[0-9]+)*
        • parameters - optional; [Base64DERencodedASN1Value]
          Optional parameters of the algorithm (depending on the algorithm).
        • anyParameters - optional; [complexType]
      • anyElement - optional; [complexType]
    • TLSServerCapabilities [TLSServerCapabilities]
      The capabilities of the TLS server implementation.
      • TLSServerSupported - optional; [TLSVersions]
        Indicates which TLS versions are supported by the device.
      • EnabledVersionsSupported - optional; [boolean]
        Indicates whether the device supports enabling and disabling specific TLS versions.
      • MaximumNumberOfTLSCertificationPaths - optional; [positiveInteger]
        Indicates the maximum number of certification paths that may be assigned to the TLS server simultaneously.
      • SetupDuration - optional; [duration]
        Indicates the maximum time taken for updated TLS server settings to take effect.
      • TLSClientAuthSupported - optional; [boolean]
        Indicates whether the device supports TLS client authentication.
      • CnMapsToUserSupported - optional; [boolean]
        Indicates whether the device supports TLS client authorization using common name to local user mapping.
      • MaximumNumberOfTLSCertificationPathValidationPolicies - optional; [nonNegativeInteger]
        Indicates the maximum number of certification path validation policies that may be assigned to the TLS server simultaneously.
    • Dot1XCapabilities - optional; [Dot1XCapabilities]
      The capabilities of the 802.1X implementation.
      • MaximumNumberOfDot1XConfigurations - optional; [positiveInteger]
        The maximum number of 802.1X configurations that may be defined simultaneously.
      • Dot1XMethods - optional; [Dot1XMethods]
        The authentication methods supported by the 802.1X implementation.
    • AuthorizationServer - optional; [AuthorizationServerConfigurationCapabilities]
      The capabilities for external authorization server capabilities.
      • MaxConfigurations - optional; [int]
        Indicates maximum number of authorization server configurations supported.
      • ConfigurationTypesSupported - optional; [StringList]
        Enumerates the supported authorization server configuration types, see tas:AuthorizationServerConfigurationType.
      • ClientAuthenticationMethodsSupported - optional; [StringList]
        Enumerates the supported client authentication methods, see tas:ClientAuthenticationMethod.
    • MediaSigning - optional; [MediaSigningCapabilities]
      The capabilities of the media signing implementation.
      • MediaSigningSupported - optional; [boolean]
        Indicates whether the device supports signing of media according to the Media Signing Specification.
      • UserMediaSigningKeySupported - optional; [boolean]
        Indicates whether the device supports signing of media using another key than the factory provisioned one.