NCast Presentation Recorder Reference Manual
6.4. W
EB
The Web tab provides for security settings and selection of the type of HTTP protocol access to the
encoder. Also, the Admin and Coordinator passwords may be changed on this page.
6.4.1. HTTP/HTTPS Access
Normal web access, which is unprotected and insecure, is accomplished through use of the HTTP
protocol typically utilizing port 80. Secure access using HTTPS (the SSL protocol) utilizes port 443.
Administration of the Presentation Recorder in open and insecure networks without the use of HTTPS
presents a security risk and should be avoided.
The Web Control page allows three different options related to Viewer and Administrative access.
•
All HTTP – Utilizes HTTP for Viewer and Administrative access.
•
Viewer HTTP/Admin HTTPS – Utilizes HTTPS for Administrative access
•
All HTTPS – Viewers and Administrators must use HTTPS
The downside of using HTTPS is that SSL Certificates (which usually require an annual fee or license
payment) are required for each Presentation Recorder unit. Non-authoritative certificates may be used,
but Viewers will see ominous warning notices in their browsers about the certificate, asking the user to
accept the validity of the connection. Also, client players such as Quicktime, which need to download
.sdp files using HTTPS protocol, may not function correctly if the certificate is not valid. Consult with your
network administrator about certificate availability for your organization.
Access using HTTPS is straightforward. Simply use the “https” prefix:
https://pr-hydra.ncast.com
This will automatically direct the request to port 443, the standard for HTTPS access.
6.4.2. Upload Certificate & Private Key
If an organization has purchased an official SSL Certificate, or has created a non-authoritative one
(which can be done with many different SSL tools) this new certificate may be uploaded and installed on
the Web Control page.
When HTTPS is turned on, the Apache server requires that the certificate be authenticated with a
password. Since this is not possible inside the Presentation Recorder, a private RSA key may be used
instead of a password. If there is not a valid private RSA key available, then Apache will not start. This is
used to disable third parties launching HTTPS with stolen certificates. More information on this topic is at
http://www.apache.org. The pass-phrase should be removed from the private key before upload.
6.4.3. Admin password
The Admin password grants rights to all configuration and setup options for the Presentation Recorder.
This password should be chosen carefully and with security in mind. Avoid use of common names,
dictionary words and the like. A randomly chosen string greater than 8 characters in length is suggested.
6.4.4. Coordinator password
The Coordinator password allows access to the Archive files.
NCast Corporation
Revision 1.0
Page 56
