Loading ...
Loading ...
Loading ...
To make mutual authentication possible in your XProtect VMS you must register Service Principal Names (SPN)
in the active directory. An SPN is an alias that uniquely identifies an entity such as a XProtect server service.
Every service that uses mutual authentication must have an SPN registered so that clients can identify the
service on the network. Without correctly registered SPNs, mutual authentication is not possible.
The table below lists the different Milestone services with corresponding port numbers you need to register:
Service Port number
Management Server - IIS 80 - Configurable
Management Server - Internal 8080
Recording Server - Data Collector 7609
Failover Server 8990
Event Server 22331
LPR Server 22334
The number of services you need to register in the active directory depends on your
current installation. Data Collector is installed automatically when installing the
Management Server, Recording Server, Event Server or Failover Server service.
You must register two SPNs for the user running the service: one with the host name and one with the fully
qualified domain name.
If you are running the service under a network user service account, you must register the two SPNs for each
computer running this service.
This is the Milestone SPN naming scheme:
VideoOS/[DNS Host Name]:[Port]
VideoOS/[Fully qualified domain name]:[Port]
The following is an example of SPNs for the Recording Server service running on a computer with the following
details:
Administrator manual | XProtect® VMS 2023 R1
134 | Requirements and considerations
Loading ...
Loading ...
Loading ...