The issue reported was that the drives will show up as offline when customers update to 21.09. If you were to roll back the server to 21.06 the drives would show up as healthy.
The Latest build will resolve this issue:
Build summary: Exacq Server Branch » server-23253-smartctl-fail-on-csmi-disks Build 1
Installer(s): https://artifactory.exacq.org/artifactory/server-local/21.09.x/6337xx/633700/
This is not an exhausted list.
Soft Triggers are not available in the Web Browser/Thin Client. Customers should use the Exacq Mobile 3 Client from a Web Browser instead.
The physical triggers are located in the menu of the mobile browser instead of on the live view.
For Example:
If you are using a trigger for audio and the associations have been created.
Connect to the Exacq Mobile 3 Client in a browser, navigate to the menu options, go to the Audio Devices, select Audio Input, and select Listen in Live.
In the lower right corner you will see the option for activating that soft trigger.
When installing the web service the Service’s do not show up. The install seems if it completed successfully but does not create a service.
After installing the latest version of the Webservice the control panel and service page looks like this: You can see the application installed but the services do not.
Check to see if nvrg.exe is installed in the BIN folder.
Run the Command Prompt as ADMIN: Note: You have to be in the bin directory or use full path.
Type the following in CMD:
cd C: \Program Files (x86) or (x64)\exacqVision\WebService\bin
Then run:
wfe.exe -k install
IF you get the follow error we need to Make Sure that this error shows before moving to correcting the registry. If this does not give an error then do not move to the registry and escalate the case.
ERROR: If you get the above error: “this registry key already exists” seen as the return from the command follow the steps below to correct the install.
Run RegEdit as ADMIN and navigate to:
Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Application\webservice
You will delete the whole webservice key seen above. Delete the Folder in the left panel only.
Once that is done you can re run the command above and if it runs successfully you can validate the service shows up in the services. If it does start the service and in a browser browse to 127.0.0.1 (list port intended).
Johnson Controls has confirmed a vulnerability impacting the exacqVision Web Service. The exacqVision Web Service is also included in the exacqVision Server Bundle along with the exacqVision Client and exacqVision Server. The exacqVision Web Service allows users to retrieve video and other data from exacqVision servers using a browser and mobile application. When passthrough / unauthenticated access is enabled, credentials for other systems connected to exacqVision could be exposed.
Under certain configurations an unauthenticated remote user could be given access to credentials stored in the exacqVision Server.
How to diagnose if the Fast Reverse Proxy Client (FRPC) is the source of issues with the ExacqVision Web Server relay service.
ExacqVision Web Server
FRPC provides a proxy service for Relay Connections used by ExacqVision Web Server. This eliminates the need for firewall configuration and prevents exposing the NVR directly to inbound internet traffic via port forwarding by creating a unique public relay URL.
Some antivirus software may identify this client as a threat and will block, remove, or prevent the installation of FRPC.
This usually manifests itself with issues either in initial setup of the relay service or when existing relay services stop working.
To confirm, check the ExacqVision Web Server logs for entries similar to the following:<br><br>
2021-06-15T10:02:51.215-0400 error failed to launch relay proxy client: file: frpc.exe not found<br><br>Next confirm that FRPC is present in the appropriate install folder.
The default install locations are:
WindowsC:\Program Files\exacqVision\WebService\bin\frpc.exe
Linux/usr/local/exacq/webservice/bin/frpc
Note: In some cases users may need to add relay.exacq.net to the allow list in their firewall.
An authenticated exacqVision Web Service user could access a web page that does not properly preserve the web page structure.
The software does not sufficiently validate, filter, escape, and/or encode user-controllable input before it is placed as output that is used as a web page that is served to other users.
All versions of exacqVision Web Service up to and including 21.03.
Upgrade all previous versions of exacqVision Web Service to the latest version of 21.06+.
Current users can obtain the critical software update from the Software Downloads location at https://www.exacq.com/support/downloads.php.
Cyber Solutions Website – https://www.johnsoncontrols.com/cyber-solutions/security-advisories
CVE-2021-27659 – NIST National Vulnerability Database (NVD) https://nvd.nist.gov/vuln/detail/CVE-2021-27659 and MITRE CVE® https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-27659
The exacqVision Web Service allows you to use a web browser to view live video, search and play back recorded video, and control pan/tilt/zoom functions on cameras connected to exacqVision servers. The Web Service connects to the exacqVision server as a client and transcodes captured video into JPEG files. The service then sends the JPEGs to the browser as fast as requested by the browser, or as fast as possible if the requested rate is too high for the connection.