MediaSigning
Security (MediaSigning) service implementation.
Bases: ONVIFService
Security (MediaSigning) service client.
| Property | Details |
|---|---|
| First introduced | ONVIF 23.12 (December 2023) |
| Binding name | MediaSigningBinding (ver10/advancedsecurity/wsdl/advancedsecurity.wsdl) |
| Operations | advancedsecurity.wsdl |
| Spec | Security |
| Data Format | Media Signing |
| File Format | Export File |
This operation assigns certification path (certificate chain) to use for media signing, replacing the one that is provisioned during factory production.
The leaf certificate in the chain and its associated private key shall be used for signing media as described in the [Media Signing Spec]. This key and certificate is referred to as user provisioned key and certificate in that specification.
If this operation is called when there is already a user provisioned certification path configured, the existing certification path shall be replaced with the new certification path.
A device shall support this command if the UserMediaSigningKeySupported capability is true.
Input
-
CertificationPathID[CertificationPathID]
This operation removes a certificate assignment (including certification path) on the device that has been added by AddMediaSigningCertificateAssignment.
The factory provisioned certification path cannot be removed.
If media signing on the device is enabled, the device shall produce a ReferenceExists fault and shall not remove the certificate assignment.
A device shall support this command if the UserMediaSigningKeySupported capability is true.
Input
-
CertificationPathID[CertificationPathID]
This operation returns the IDs of the certification paths that are assigned for media signing on the device.
This operation will always return the factory provisioned certification path and can additionally return a certification path that has been added by AddMediaSigningCertificateAssignment.
A device shall support this command if the MediaSigningSupported capability is true.
Output
-
CertificationPathID- optional; [CertificationPathID]The IDs of all certification paths that are assigned for media signing. Response list shall be ordered with factory-provisioned ID first, followed by user-provisioned ID. As response structure includes just CertificationPathID, the client may retrieve the assigned media signing certificates by invoking GetCertificationPath with the CertificationPathID, followed by GetCertificates