Categories
Knowledge Support Support exacqVision Enterprise Categories Products

Enterprise Manager Updating Java Version in Solr

Issue

Enterprise Manager uses a package called Solr which in turn uses Java.  Currently, we do not offer an update path for Solr that will update the Java version.  The following instructions can be used if the need arises were Java needs to be updated.  

Resolution

Windows 64-bit

  • Assumes EM is installed at C:\program files\exacqVision\EnterpriseManager for Windows 64 bit
  • Download the 64 bit JRE for Windows from the Oracle website
  • Shut down all enterprise manager services
  • Shut down solrApache service
  • Shut down solrJetty service
  • Rename the existing java folder to java.old inside C:\Program Files\exacqVision\EnterpriseManager\apache_solr\
  • cd to the path where the jre.exe is located
  • Execute the following command

jre-8u231-windows-x64.exe /s INSTALLDIR="C:\Program Files\exacqVision\EnterpriseManager\apache_solr\java" STATIC=1

  • This command does not block until installation is complete, but if you cd to the install dir, you will notice the new java folder getting created, and new JRE installed to it.
  • There is no accurate way to determine whether installation has completed, so please check if the jre.exe process is running in task manager.
  • Once the installation is complete, start all the enterprise manager services, solrApache and solrJetty.
  • Perform a sanity check of the installation by accessing the Solr home page and making sure it loads,  and is able to query successfully with pre-existing data.
  • Remove the renamed folder java.old 

Windows 32-bit

  • Assumes EM is installed at C:\exacqVisionEM for Windowx 32 bit installation
  • Download the 32-bit jre from Oracle website
  • Shut down all enterprise manager services
  • Shut down solrApache service
  • Shut down solrJetty service
  • Rename the existing java folder to java.old inside C:\exacqVisionEM\apache_solr
  • Execute the following command to update jre

jre-8u231-windows-i586.exe /s INSTALLDIR="C:\exacqVisionEM\apache_solr\java" STATIC=1

  • This command does not block until installation is complete, but if you cd to the install dir, you  will notice the new java folder getting created, and new JRE installed to it
  • There is no accurate way to determine whether installation has completed, so please check if  the jre.exe process is running in task manager.
  • Once the installation is complete, start all the enterprise manager services, solrApache and  solrJetty.
  • Perform a sanity check of the installation by accessing the Solr home page and making sure it  loads, and is able to query successfully with pre-existing data.
  • Remove the java.old renamed folder

Linux 32 and 64-bit

  • Download the appropriate jre-linux-x64.tar.gz or jre-linux-i586.tar.gz from Oracle website
  • Shut down all enterprise manager services
  • On linux stopping enterprise-webservice will also stop apache and solr servers
  • rename the existing java directory to java.old
  • Assuming EM is located at /usr/local/exacq/esm
  • Extract the jre-linux-*.tar.gz to the enterprise manager install dir

sudo tar -zxf jre-linux-*.tar.gz -C /usr/local/exacq/esm/apache_solr

  • Rename the extracted dir from jre-* to java
  • Remove the renamed folderjava.old

Categories
Documentation Quick Start Guides exacqVision Enterprise Categories Products

EM-Series Quick Start Guide

EM-Series-1.pdf
Categories
Documentation Data Sheets exacqVision Enterprise Categories Products

exacqVision Enterprise Manager

Enterprise-Manager.pdf
Categories
Knowledge Support Support exacqVision Enterprise Categories Products

Enterprise Manager Outbound Firewall Rules on Restricted Networks

Issue

Accessing our licensing server from Enterprise Manager on a restricted network will require an exception to the outbound firewall rules.  Please add exacq.com and port 443 to the outbound firewall rules to open access.

<br>

Version Affected

All.

<br>

Categories
Knowledge Support Support exacqVision Enterprise Categories Products

Enabling stronger cipher/protocol security with Enterprise Manager

If your exacqVision Enterprise Manager is already using HTTPS as described in our Knowledge Base Article ‘How to Enable HTTPS for ESM’ you can make sure you are using strong ciphers and the most current ssl protocol using this document.

<br>

Locate and make the indicated changes to the file httpd-ssl.conf

<br>

Windows

C:\Program Files\exacqVision\EnterpriseManager\apache_solr\apache2\conf\extra\httpd-ssl.conf

<br>

Linux

/usr/local/exacq/esm/apache_solr/apache2/conf/extra/httpd-ssl.conf

<br>

Find SSLCipherSuite and SSLProxyCipherSuite and make sure they match the following.

<br>

Find the SSL Protocol Support section and make sure the following is set as follows.   Note, it may be possible to user TLSv1.3 but it has not been tested yet.

<br>

Verifying

To verify the endpoint is running as expected for your Enterprise Manager HTTPS site.

<br>

Run the following command from a Linux machine with openssl installed.

<br>

Note the output under SSL-Session.

<br>

Enabling-stronger-cipher-protocol-security-with-Enterprise-Manager.pdf
Categories
Knowledge Support Support exacqVision Enterprise Categories Products

Installing 32-bit Enterprise Manager (EM) on 64-bit 14.04 or 16.04 Ubuntu Linux System

Objective

Installing 32-bit Enterprise Manager on a 64-bit Ubuntu 14.04 or 16.04 Linux computer, complete the following steps:

<br>

Instructions

Configuring a new system.

<br>

Setup multiarch

<br>

Remote Setup

  1. Ensure that X Windows can be forwarded to anyone using Putty or SSH (install gedit).
  2. Use Filezilla to transfer the debian installer to the instance.
  3. Connect using Putty or SSH with X Windows forwarding enabled.

<br>

Installing Enterprise System Manager (ESM)

  1. Install ESM with sudo dpkg -i exacqVisionEnterpriseSystemManager.deb (using the exact name of the file if different from what is shown here).
  2. Accept the defaults for port selection.
  3. Click YES on the warning message for 64-bit Architecture.
  4. Point ESM at the newly created database.
  5. Select No for migration and schema printing.
  6. Launch a browser and connect to ESM.
  7. Modify the admin account’s username and password.

<br>

Installing-32-bit-Enterprise-Manager-EM-on-64-bit-14.04-or-16.04-Ubuntu-Linux-System.pdf
Categories
Knowledge Support Support exacqVision Enterprise Categories Products

Understanding DDNS behavior in ExacqVision ISP (exacqCloud)

Dynamic Domain Name System (DDNS)

If a customer sets up the DDNS feature for a server. It means that we take the outbound connection of that server, map the external IP of the server to a DDNS address. This allows, assuming proper access is allowed into their network, the ability to externally reach the web service on that machine.

<br>

That DDNS mapping to external IP is constantly updated as the server reconnects, so any Public DHCP changes would automatically be handled.

<br>

However, in the event the server SSA expires, Enterprise Manager no longer monitors that server. Even though the DDNS is still enabled, we no longer will update the IP address if it were to change. The server must have an active SSA for that to continue.

<br>

Understanding-DDNS-behavior-in-ExacqVision-ISP-exacqCloud.pdf

Categories
Knowledge Support Support exacqVision Enterprise Categories Products

Configuring live video streams in Enterprise Manager

Live video streaming is available in Enterprise Manager (EM), formerly known as Enterprise System Manager (ESM). This is useful for examining camera stream quality through the EM interface but also used for EM’s Camera Inspection feature.

Older versions relied on the ExacqVision Web Service to stream video, but beginning in ESM version 5.12, the ExacqVision Web Service is no longer required. Video is now directly streamed from the ExacqVision Server.

To accomplish this, the user account logged into Enterprise Manager must have specific privileges and permissions enabled.

NOTE: It is normally understood that Administrator accounts have privileges to perform everything possible. However, within Enterprise Manager live video streaming while logged in ad admin is prevented. This is both a function of the fact that EM admin accounts have no server account as well as a privacy feature. Instead, you will need to log into EM as a user other than the EM administrator. This account must have Live Viewing privileges to the cameras of interest.


Creating a User Account for Live Viewing

As mentioned above, the user you log into Enterprise Manager with must have Live Viewing privileges to the cameras of interest on each server involved. If you wish to provide access to existing users, be sure that they have Live Viewing Privileges enabled for any video inputs they need to view.

  1. Click on Users from the navigation menu.<br><br>
  2. Click on the Add User icon from the Users toolbar.
    <br><br>
  3. If creating a new user account, select a Server User Role with Live Viewing privileges. The pre-configured roles with Live Viewing privileges include:
    • Admin
    • Power User
    • Live Only
    • Live + Search<br><br>
  4. If you choose to create a Custom User Role, either on the server itself or through EM’s User Role’s page, enable Allow Live Viewing Privileges, and provide access to the specific video inputs under Permissions.
    <br><br>
  5. Select a role, as needed, for each ExacqVision Server or server group listed.<br><br>
  6. After making changes, allow some time for the changes to sync across your systems. <br><br>

Configuring a New Server for Live Viewing

  1. Click on Servers from the navigation panel.<br><br>
  2. Click the Add Server link.<br><br>
  3. Complete the information about the server as needed.<br><br>
  4. Enable the check box next to Enable Live Streaming.
    <br><br>
  5. Click Save to save your changes when done.<br><br>

Configuring an Existing Server for Live Viewing

  1. Click on Servers from the navigation panel.<br><br>
  2. From the Server List, locate the server of interest and click it to reach the system information page.<br><br>
  3. Click the Edit icon from the system toolbar.
    <br><br>
  4. Enable the check box next to Enable Live Streaming.
    <br><br>
  5. Click Apply to save your changes when done.<br><br>

Viewing Live Streams

  1. Login to Enterprise Manager as the non-Admin EM user.<br><br>
  2. Navigate to a camera, by one of the following:
    • Use the Cameras link from the navigation menu on the left, then click the Camera name from the Cameras List
    • From the Servers List, open the server details page of a particular server and scroll to the list of Cameras on that server, then click the link to the Camera name.<br><br>
  3. Once on the Camera details page, scroll to the Video Feed section.<br><br>
  4. Click on the Play Video icon to start streaming.

    NOTE: If the account you are logged into EM with does not have privileges to view live video a “No live privilege on the server” message will be displayed. See above information on creating or logging in with an appropriate account.<br><br>
  5. Selecting the link, Use current image as camera image, below the video feed will set the current view as a reference thumbnail at the top of the camera details page as well as provide a reference image when using the Camera Inspection tool within EM.
    <br><br>

<br>

Categories
Knowledge Support Support exacqVision Enterprise Categories Products

Using ESM with MS SQL Server

For ESM to run successfully with an MS SQL Server database, the user role that ESM is using should, at minimum, have the following permissions:

  • ddladmin
  • dbwriter
  • dbreader

<br>

Categories
exacqVision Enterprise Categories Products

ESM API documentation is not always accurate

Issue

When viewing endpoints, the example response may not actually match the response when you use the ‘Try it Out’ button.

Also, some attributes may specify it returns a string but instead it returns an integer. It is recommended to utilize the ‘Try it Out’ button for the API you wish to use as how that API will actually behave.

<br>