Euresys Picolo.net HD1 User Manual

USER GUIDE

Picolo.net

Picolo.net HD1

Picolo.net User Guide

EURESYS s.a. shall retain all property rights, title and interest of the documentation of the hardware and the software, and of the trademarks of EURESYS s.a.

All the names of companies and products mentioned in the documentation may be the trademarks of their respective owners.

The licensing, use, leasing, loaning, translation, reproduction, copying or modification of the hardware or the software, brands or documentation of EURESYS s.a. contained in this book, is not allowed without prior notice.

EURESYS s.a. may modify the product specification or change the information given in this documentation at any time, at its discretion, and without prior notice.

EURESYS s.a. shall not be liable for any loss of or damage to revenues, profits, goodwill, data, information systems or other special, incidental, indirect, consequential or punitive damages of any kind arising in connection with the use of the hardware or the software of EURESYS s.a. or resulting of omissions or errors in this documentation.

Picolo.net User Guide

Contents

1. Using the Web Interface 5

1.1. Introduction 5

1.2. Home Page 7

1.3. Media Profiles Page 11

Media Profile Page 12

1.4. Configurations Page 17

Edit Video Encoder Configuration Page 26 Edit Audio Encoder Configuration Page 29 Edit Metadata Configuration Page 31

1.5. Digital Inputs & Relay Outputs Page 33

1.6. Audio Outputs Page 36

1.7. PTZ Page 37

1.8. Device Management Page 39

Network Tab 40 Time Tab 43 Discovery Tab 46 Maintenance Tab 47

1.9. Users Management Page 49

1.10. Storage Page 50

1.11. Layers Page 53

1.12. Hidden Pages 55

Check Status Page 55

2. Installing a Picolo.net 56

2.1. Declarations 56

CE Compliance (EMC Class A) 56 FCC Compliance (Class A) 56 KC Compliance 57 RoHS Compliance 57 WEEE 57

2.2. Precautions of Use 57

2.3. Installation 58

2.4. Connectors Location and Markings 59

2.5. Connections 60

2.6. Configuration 62

Picolo.net User Guide

2.7. Final Check 64

3. Maintaining the Product 65

3.1. Upgrading the Firmware 65

3.2. Configuring Backup and Restore 65

4. Application Notes 66

4.1. Encrypted Media Storage 66

Purpose 66 eCryptfs Encryption Layer 67 eCryptfs Header 68 Web Services 71 References 72 Appendix 73

4.2. [[[Missing Linked File System.LinkedHeader]]] 74

Coding Guidelines for VMS Application 74

Web Services 74 Encrypted Live Stream Support 76 Reference Documents 78

Picolo.net User Guide 1. Using the Web Interface

1. Using the Web Interface

1.1. Introduction

URL

The Home Page URL is: http://[device-ip-address]

The web pages of 1669 Picolo.net HD1 are available in English (default), Japanese, Chinese and Korean. The selection is automatic based on the 'Accept-Language' HTTP header sent by your web browser (it usually depends on your operating system localization).

Page Layout

Page sample

1. Left panel: Navigation links

2. Main panel

3. Tab

4. Panel

5. Page title

6. Login

Picolo.net User Guide 1. Using the Web Interface

Navigation Links

Navigation links provide a single-click access to the main page of each section

1. Select "Home Page" on the next page to view device information and display video source.

2. Select "Media Profiles Page" on page11 to view/edit/delete/create media profiles.

3. Select "Configurations Page" on page17 to view/edit configurations of video source, video

encoder, audio source, audio encoder, PTZ and metadata objects.

4. Select "Digital Inputs & Relay Outputs Page" on page33 to view/edit configuration of digital

input and relay output objects.

5. Select "Audio Outputs Page" on page36 to view/edit configuration of audio output object

6. Select "PTZ Page" on page37 to view/edit configuration of the serial port and the PTZNode

objects

7. Select "Device Management Page" on page39 to view/edit network, time and date and

discovery settings and perform maintenance tasks

8. Select "Users Management Page" on page49 to create/delete users and view/edit user

properties.

9. Select "Storage Page" on page50 to mount/unmount storage media,

enable/disable/start/stop recording and list/preview stored media files.

10.Select "Layers Page" on page53 to configure OSD (On Screen Display) location and content.

Picolo.net User Guide 1. Using the Web Interface

1.2. Home Page

View device information and display video source

Home page

The main pane of the Home page displays 2 panels:

□ A Device Information panel providing general information about the device

□ A Sources panel providing a mosaic display of all the video sources of the device

Picolo.net User Guide 1. Using the Web Interface

Device Information Panel

Device Information panel

Device Information panel fields description

Name Description

Model Product code and product name of the device

Manufacturer Manufacturer name of the device

Serial Number Serial number of the device

Firmware Version

Major and minor version numbers of the firmware that is currently on the device.

IP Address IPv4 address of the device currently assigned to the device

MAC Address MAC Address of the LAN port of the device

Picolo.net User Guide 1. Using the Web Interface

Sources Panel

Sources panel

The Sources panel shows a rectangular area containing:

□ A title composed of the name, the native resolution, and the native frame rate of the

video source.

□ A snapshot image providing that the source is referenced by a properly configured ONVIF

Media Profile.

Note: If the ONVIF Media Profile is not properly configured, the image is replaced by a black

background overlayed by a crossed rectangle. If the source has no video, a blue image is displayed. Clicking on the image brings the browser to the View/Edit Profile page for the profile that generated the snapshot.

Picolo.net User Guide 1. Using the Web Interface

Access Denied Home Page

Once security is enabled, an anonymous user accessing the device Home page obtains the following page:

Home page when access is denied

Clicking on the [login] hyperlink opens the Login page.

Login Page

The Login page displays the Login panel.

Picolo.net User Guide 1. Using the Web Interface

Name Description

Username User name

Password User password

Use Advanced Options Cross the checkbox if specific password derivations are required.

Password Derivation

Password derivation allows the user of multiple devices to type the same string when authenticating on any device while the value stored on the device is actually different for each device.

Value Description

None

Onvif

1.0

Onvif

2.0+

No password derivation, the device password is directly typed by the user. Default setting.

The password is computed (derived) from the device identity and the user-typed string according to ONVIF 1.0 specification.

The password is computed (derived) from the device identity and the user-typed string according to ONVIF 2.0 (or later) specification.

1.3. Media Profiles Page

The Media Profiles page displays the Media Profiles panel.

Media Profiles panel

Profiles List

The Media Profiles panel lists all the existing ONVIF Media Profiles. Each list item contains:

Picolo.net User Guide 1. Using the Web Interface

● A thumbnail image of the video source

● The name of the profile e.g. Profile01

● Between square brackets, a selection of profile properties including: name of the video

source, resolution, frame rate, encoding method, bit rate, and rate control method of the encoded stream.

● A View/Edit button.

● A Delete button.

Clicking on the View/Edit button opens the Media Profile page allowing the user to view or edit the profile properties.

Clicking on the Delete button deletes the profile.

Profile Creation & Auto Setup

The bottom right area of the Media Profiles panel contains two buttons:

● The Create New Profile button.

● The Auto Setup Profiles button.

Clicking on the Create New Profile button starts the profile creation procedure. First of all, the procedure opens a dialog box requiring the name of the new profile. Then it displays the Configurations page allowing the user to configure the ONVIF Media Profile.

Clicking on the Auto Setup Profiles button initiates the auto setup procedure. Before proceeding, a dialog box opens requiring to confirm the action.

Warning: the auto setup procedure erases all the existing ONVIF Media Profiles!

Media Profile Page

The Media Profile page of the Web Server is relative to a single ONVIF Media Profile. It allows the user to:

● View the encoded video stream in the Live Media panel

● View the properties of the components of an ONVIF Media Profile using the configuration

panels

● Modify the composition of ONVIF Media Profiles using the Media Profile Configuration panels

The panels composing this page can be hidden or shown individually by clicking on the [Hide] or [Show] text. Initially, only the Live Media panel is shown.

Picolo.net User Guide 1. Using the Web Interface

Live Media Panel

Live Media panel

The Live Media panel provides a live display of the video source unicast stream using the VLC plug-in of the Web Browser.

The panel title shows, between square brackets, the resolution and the frame rate of the encoded video stream.

In the bottom area, the panel provides:

● The Unicast URL of the video stream

● The Multicast URL of the video stream

The Start Multicast button starts multicast streaming for the selected media profile.

□ This is not necessary for clients that connect to the stream via the RTSP link provided.

□ Multicast streaming continues until explicitly stopped (even after a reboot of the device).

Picolo.net User Guide 1. Using the Web Interface

□ This button also starts RFC2974 session announcement messages for the corresponding

media profile.

The Play Fullscreen button enlarges the live video on the entire screen.

The Use PTZ button adds PTZ controls on the right side of the image as shown on the following image:

PTZ controls

Media Profile Configuration Panels

Video Source Configuration panel

Picolo.net User Guide 1. Using the Web Interface

Video Encoder Configuration panel

Audio Source Configurations panel

Audio Encoder Configurations panel

Picolo.net User Guide 1. Using the Web Interface

PTZ Configuration panel

Metadata Configuration panel

● The configuration panels of the Media Profile page allow to:

□ View the composition of the profile and the characteristics their components

□ Modify the composition of the profile by addition or deletion of components.

● To facilitate the modification of existing ONVIF Media Profiles, each panel shows

simultaneously for each component:

□ On the left side: the characteristics of the configuration that is currently used by the

ONVIF Media Profile

□ On the right side: the characteristics of any selectable configuration

● Providing that the component is currently used in the profile, the upper left quadrant shows :

□ The name of the current configuration

□ A Remove button

□ An Edit button (only on relevant panels)

● Clicking on the Remove button removes the component from the profile.

● Clicking on the Edit button opens the Edit Configuration panel of the component allowing the

user to edit its properties.

● The upper right quadrant shows:

Picolo.net User Guide 1. Using the Web Interface

□ A drop-down box allowing the user to select a new configuration.

□ An Apply button.

● Clicking on the Apply button applies the new configuration to the profile.

1.4. Configurations Page

The Configurations page allows the user to view or edit the configurations of all the software objects. It provides six panels, one for each component type of an ONVIF Media Profile:

□ "Configurations Page" above

Note: All panels composing this pane can be hidden or shown individually by clicking on the

[Hide] or [Show] text.

Picolo.net User Guide 1. Using the Web Interface

Video Source Configurations panel

The drop-down box in the upper area allows to select one VideoSourceConfiguration object.

Video Source Configurations panel fields description

Name Description

Name The name of the VideoSourceConfiguration object

Video Source - Name The name of the video source

Video Source Resolution

Video Source - Frame Rate

Bounds - X, Y

The resolution [H x V] of the video source, e.g. 1920x1080

The frame rate of the video source, expressed in fps, e.g.30.00 fps

The position offset of the acquired image relative to the camera active area

Bounds - Width The number of columns of the acquired image

Bounds - Height The number of lines of the acquired image

Use Count The number of ONVIF Media Profiles using this object

Video Encoder Configurations Panels

The layout of the Video Encoder Configurations panel is specific to the video encoding method: H.264/ H.265 or JPEG.

Picolo.net User Guide 1. Using the Web Interface

H.264/H.265 Video Encoder Configurations Panel

Video Encoder Configurations panel - H.264/H.265 case

● The drop-down box in the upper area allows to select one VideoEncoderConfiguration

object.

● Clicking the Edit button in the upper area of the panel opens the Video Encoder Configuration Edition page.

● The lower area of the panel shows the properties of the selected object when it uses the

H.264 or the H.265 encoding method.

Video Source Configurations panel common fields description

Name Description

Name

The token name of the VideoEncoderConfiguration object, e.g.

VideoEncoderConfiguration01

Encoding Used video codec.

Resolution - Width, Height

Rate Control - Frame Rate Limit

The image size of the encoded stream

Maximum output frame rate in fps.

Rate Control Encoding Interval

Rate Control - Bitrate Limit

Session Timeout

Interval at which images are encoded and transmitted.

The maximum output bit rate in kbps

The RTSP session timeout. The duration is expressed using the W3C

lexical representation: PnYn MnDTnH nMnS

Picolo.net User Guide 1. Using the Web Interface

Name Description

Use Count

Multicast - Enabled

Multicast - Address

The number of ONVIF Media Profiles using that Video Encoder Configuration.

Indicates if the RTP multicast streaming of the encoded video is properly configured with a non-zero IP address and port number.

The IP address of the multicast group. In IPv4, addresses 224.0.0.0

through 239.255.255.255 are designated as multicast addresses.

Multicast - Port The port number of the multicast group.

Multicast - TTL

Multicast - AutoStart

Video Source Configurations panel H.264/H.265 encoder specific fields description

The Time-To-Live of the multicast IP datagrams. Usually 1 since the datagrams stops after the first router.

Indicates the persistence of multicast streaming. When true, the multicast streaming starts automatically.

Name Description

H264 - GOP Size Group of Pictures (or Video frames) length.

H264 - H264 Profile The H.264 profile: baseline, main or high.

H.264 - Rate Control Method

The rate control method of the H.264 method:

● VBR: Variable Bit Rate

● CBR: Constant Bit Rate

Picolo.net User Guide 1. Using the Web Interface

JPEG Video Encoder Configurations Panel

Video Encoder Configurations panel - JPEG case

The drop-down box in the upper area allows to select one VideoEncoderConfiguration object. Clicking the Edit button in the upper area of the panel opens the Video Encoder Configuration Edition page. The lower area of the panel shows the properties of the selected object when it uses the JPEG encoding method.

Picolo.net User Guide 1. Using the Web Interface

Audio Source Configurations Panel

Audio Source Configurations panel

The drop-down box in the upper area allows to select one AudioSourceConfiguration object. The lower area of the panel shows the properties of the selected object:

Audio Source Configurations panel fields description

Name Description

Name The name of the AudioSourceConfiguration object

Audio Source - Name The name of the audio source

Audio Source Channels

Use Count

The number of audio channels of the audio source

The number of ONVIF Media Profiles using that AudioSourceConfiguration object.

Picolo.net User Guide 1. Using the Web Interface

Audio Encoder Configurations panel

The drop-down box in the upper area allows to select one AudioEncoderConfiguration object. Clicking the Edit button in the upper area of the panel opens the Audio Encoder Configuration

Edition page.

Audio Encoder Configurations panel fields description

Name Description

Name The name of the AudioEncoderConfiguration object

Encoding Used audio codec

Bitrate The bit rate of the encoded audio stream

Sample Rate The sampling rate of the encoded audio stream

Multicast - Enabled

Multicast - Address

Indicates if the RTP multicast streaming of the encoded video is properly configured with a non-zero IP address and port number.

The IP address of the multicast group. In IPv4, addresses 224.0.0.0

through 239.255.255.255 are designated as multicast addresses.

Multicast - Port The port number of the multicast group.

Multicast - TTL

Multicast - AutoStart

The Time-To-Live of the multicast IP datagrams. Usually 1 since the

datagrams stops after the first router.

Indicates the persistence of multicast streaming. When true, the multicast streaming starts automatically.

Use Count The number of ONVIF Media Profiles using this object.

Picolo.net User Guide 1. Using the Web Interface

PTZ Configurations Panel

PTZ Configurations panel

The drop-down box in the upper area allows to select one PTZConfiguration object. The lower area of the panel shows the properties of the selected object:

PTZ Configurations panel fields description

Name Description

Name The name of the PTZConfiguration object

Node - Name The name of the PTZ node, e.g. PTZNode01

The default timeout value for the continuous movements. The

Default PTZ Timeout

duration is expressed using the W3C lexical representation: PnYn MnDTnH nMnS .

Use Count

The number of ONVIF Media Profiles using that PTZConfiguration object.

Picolo.net User Guide 1. Using the Web Interface

Metadata Configurations Panel

Metadata Configurations panel

The drop-down box in the upper area allows to select one MetadataConfiguration object. Clicking the Edit button in the upper area of the panel opens the Metadata Configuration Edition page.

Metadata Configurations panel fields description

Name Description

Name The name of the MetadataConfiguration object

Events - Filter

Session Timeout

List of filtered event items. When empty: means that no events are

filtered.

The RTSP session timeout. The duration is expressed using the W3C lexical representation: PnYn MnDTnH nMnS

Use Count The number of ONVIF Media Profiles using that object

Multicast - Enabled

Multicast - Address

Indicates if the RTP multicast streaming of the metadata is properly configured with a non-zero IP address and port number.

The IP address of the multicast group. In IPv4, addresses 224.0.0.0

through 239.255.255.255 are designated as multicast addresses.

Multicast - Port The port number of the multicast group.

Multicast - TTL

Multicast - AutoStart

The Time-To-Live of the multicast IP datagrams. Usually 1 since the

datagrams stops after the first router.

Indicates the persistence of multicast streaming. When true, the multicast streaming starts automatically.

Picolo.net User Guide 1. Using the Web Interface

Edit Video Encoder Configuration Page

The Edit Video Encoder Configuration page allows the edition of the properties of the

VideoEncoderConfiguration object.

It shows a single panel: the Video Encoder Configuration panel.

The layout of the Video Encoder Configurations panel is specific to the video encoding method.

Video Encoder Configuration Panel

H.264/H.265 VIDEO Encoder Configuration Panel

Edit Video Encoder Configuration panel - H.264/H.265 case

Picolo.net User Guide 1. Using the Web Interface

JPEG Video Encoder Configuration panel

Edit Video Encoder Configuration panel - JPEG case

Video Encoder Configuration panel common fields description

Name Description

Token

The token name of the VideoEncoderConfiguration object, e.g.

VideoEncoderConfiguration01. This field cannot be edited.

Name A friendly name given to the configuration. Default value = token name

Encoding Video encoding method: H.264 or JPEG

Resolution The resolution of the encoded image, e.g. 1920x1080

Rate Control Frame Rate Limit

The maximum output frame rate of the encoded stream, in fps. If an

EncodingInterval is provided, the resulting encoded frame rate will be reduced by the given factor.

Rate Control Encoding

The interval at which images are encoded and transmitted. A value of 1 means

that every frame is encoded, a value of 2 means that every 2nd frame is encoded,...

Interval

Rate Control Bitrate Limit

Multicast -

The maximum output bit rate in kbps. This field cannot be edited in case of JPEG

encoding.

Check the box to configure RTP multicast streaming.

Picolo.net User Guide 1. Using the Web Interface

Name Description

Enable multicast

Multicast Multicast Address

The IP address of the multicast group. In IPv4, addresses 224.0.0.0 through

239.255.255.255 are designated as multicast addresses.

Multicast Multicast

The port number of the multicast group.

Port

Multicast Multicast TTL

Multicast Multicast AutoStart

Video Encoder Configuration panel H.264/H.265 specific fields description

The Time-To-Live of the multicast IP datagrams. Usually 1 since the datagrams stops after the first router.

Indicates the persistence of multicast streaming. When true, the multicast streaming starts automatically. This field cannot be edited.This is enabled/disabled by clicking on the Start/Stop Multicast button (in the Live Media Panel).

Name Description

Length of the Group of Pictures (or Video frames). Determines typically the interval GOP Size

in which the I-Frames will be coded. An entry of 1 indicates I-Frames are continuously

generated. An entry of 2 indicates that every 2nd image is an I-Frame, and 3 only every

3rd frame, etc. The frames in between are coded as P or B Frames.

Profile The H.264 encoder profiles: baseline, main, or high.

Rate Control

- Rate Control Method

Low Latency

The rate control method of the H.264 encoder. Possible values:

● VBR: Variable Bit Rate

● CBR: Constant Bit Rate

Check the box to configure the low-latency encoding method.

Picolo.net User Guide 1. Using the Web Interface

Edit Audio Encoder Configuration Page

The Edit AudioEncoder Configuration page allows the edition of the properties of the

AudioEncoderConfiguration object.

It shows a single panel: the Audio Encoder Configuration panel.

The layout of the Audio Encoder Configurations panel is specific to the audio encoding method.

Audio Encoder Configuration Panel

AAC Audio Encoder Configuration Panel

Edit Audio Encoder Configuration panel - AAC case

G.711 Audio Encoder Configuration Panel

Edit Audio Encoder Configuration panel - G.711 case

Picolo.net User Guide 1. Using the Web Interface

LPCM Audio Encoder Configuration Edition panel

Edit Audio Encoder Configuration panel - LPCM case

Audio Encoder Configuration panel fields description

Name Description

Token

The token name of the AudioEncoderConfiguration object, e.g. AudioEncoderConfiguration01. This field cannot be edited.

Name A friendly name given to the configuration. Default value = token name

Audio encoding method:

● AAC: 1Advanced Audio Coding

Encoding

● G711: G.711 µ-Law

● L16: 16-bit linear PCM

The bitrate of the encoded audio stream expressed in kilobits per second.

● 128 kbps for the AAC encoding method

Bitrate

● 64 kbps for the G.711 encoding method

● 768 kbps for the L16 encoding method

The sampling rate of the encoded audio stream expressed in kHz.

Sample Rate

Multicast

- Enable multicast

● Select 48 kHz for the AAC encoding method

● Select 8 kHz for the G.711 encoding method (Default setting)

● Select 48 kHz for the L16 encoding method

Check the button to configure RTP multicast streaming.

Picolo.net User Guide 1. Using the Web Interface

Name Description

Multicast

Multicast Address

Multicast

Multicast Port

Multicast

Multicast TTL

The IP address of the multicast group. In IPv4, addresses 224.0.0.0 through

239.255.255.255 are designated as multicast addresses.

The port number of the multicast group.

The Time-To-Live of the multicast IP datagrams. Usually 1 since the datagrams

stops after the first router.

Multicast

Multicast AutoStart

Indicates the persistence of multicast streaming. When true, the multicast

streaming starts automatically. This field cannot be edited.This is enabled/disabled by clicking on the Start/Stop Multicast button (in the Live Media Panel).

Edit Metadata Configuration Page

The Edit Metadata Configuration page allows the edition of the properties of the

MetadataConfiguration object.

It shows a single panel: the Metadata Configuration panel.

Picolo.net User Guide 1. Using the Web Interface

Metadata Configuration Edition panel

Edit Metadata Configuration panel

Metadata Configuration panel fields description

Name Description

Token

Name

Events - Filter

Session Timeout

Multicast - Enable multicast

Multicast - Multicast Address

The token name of the MetadataConfiguration object, e.g. MetdataConfiguration01. This field cannot be edited.

A friendly name given to the configuration. Default value = token

name

List of filtered event items. When empty: means that no events are filtered.

The RTSP session timeout. The duration is expressed using the W3C lexical representation: PnYn MnDTnH nMnS

Check the button to configure RTP multicast streaming.

The IP address of the multicast group. In IPv4, addresses 224.0.0.0

through 239.255.255.255 are designated as multicast addresses.

Multicast - Multicast Port

Multicast - Multicast TTL

Multicast - Multicast AutoStart

The port number of the multicast group.

The Time-To-Live of the multicast IP datagrams. Usually 1 since the

datagrams stops after the first router.

Indicates the persistence of multicast streaming. When true, the multicast streaming starts automatically. This field cannot be edited.

Picolo.net User Guide 1. Using the Web Interface

1.5. Digital Inputs & Relay Outputs Page

The Digital Inputs & Relay Outputs page allows the user to view or edit the configuration of

DigitalInput and RelayOutput objects.

A DigitalInput object represents an Alarm Input port; a RelayOutput object represents one Relay Output port.

Note: The panels composing this pane can be hidden or shown individually by clicking on the

[Hide] or [Show] text.

Digital Input Panel

Digital Input panel

The Digital Input panel allows the user to view the configuration of DigitalInput objects.

The drop-down box in the upper area allows to select one DigitalInput object.

Digital Input panel fields description

Name Description

Type (amplitude) of signal. Possible values are:

● TTL => threshold voltage = 1.5 V

Voltage Threshold

● 5VCMOS => threshold voltage = 2.5 V

● 12V => threshold voltage = 6V

The strength (time constant) of the deglitching filter. Possible values are:

● OFF => No filtering

Timing Filter

● 10ms => Weak filtering: filters out transients shorter than 10

milliseconds

● 100ms =>Strongest filtering: filters out transients shorter than

100 milliseconds

Picolo.net User Guide 1. Using the Web Interface

Name Description

Events Enabled

When true, any valid (= not filtered out) transition on the input produces an event.

Clicking on the Edit button opens the Edit Digital Input Configuration page.

Clicking on the Show Input States button opens the Digital Input States page.

EDIT Digital Input Configuration Page

Edit Digital Input panel

The Edit Digital Input Configuration page displays a single panel, named Digital Input, allowing the user to edit the properties of the selected Digital Input object.

Checking the Enable Events check box enables the event generation for that input.

Digital Inputs States page

The Digital Inputs States page displays a single panel allowing the user to view the state of all

DigitalInput objects.

Digital Input States panel

The Digital Inputs States panel is refreshed automatically.

State values for contact closure devices

State Description

OPEN The contact is open

LOW The contact is closed

Picolo.net User Guide 1. Using the Web Interface

State values for logical devices

State Description

OPEN Logical device is in High-Z

LOW Logical device is driving LOW

HIGH Logical device is driving HIGH

Relay Output Panel

Relay Output panel

The Relay Output panel allows the user to view the configuration of RelayOutput objects.

The drop-down box in the upper area allows to select one RelayOutputobject.

The lower area of the panel shows the properties of the selected object:

Relay Outputs panel fields description

Name Description

The operating mode of the relay output. Possible values are:

Properties

- Mode

● Monostable => After setting the state, the relay returns to its idle state after

the specified time.

● Bistable => After setting the state, the relay remains in this state.

Properties

- Delay Time

Specifies the time after which the relay returns to its idle state if it is in monostable mode. If the relay is set to bistable mode the value of the parameter shall be ignored. The duration is expressed using the W3C lexical representation:

PnYn MnDTnH nMnS

Position of the relay when the relay state is set to ‘inactive’ through the trigger

Properties

- Idle State

command.. Possible values are:

● Closed => The relay is closed.

● Open=> The relay is open

Clicking on the Edit button opens the Edit Relay Output Configuration page.

Picolo.net User Guide 1. Using the Web Interface

Edit Relay Output Configuration Page

Edit Relay Output panel

The Edit Relay Output Configuration page displays a single panel, named Relay Output, allowing the user to edit the properties of the selected RelayOutput object.

1.6. Audio Outputs Page

The Audio Outputs page allows the user to view or edit the configuration of Picolo

AudioOutput objects.

A Picolo AudioOutput object represents one Audio Output port.

Picolo Audio Output Panel

The Picolo Audio Outputs panel allows the user to view the configuration of Picolo

AudioOutput objects.

The drop-down box in the upper area allows to select one Picolo AudioOutput object. The lower area of the panel shows the properties of the selected object:

Picolo Audio Output panel fields description

Name Description

Source URI URI of an RTSP audio stream

Username User name on the RTSP server

Picolo.net User Guide 1. Using the Web Interface

Clicking on the Edit button opens the Edit Picolo Audio Output Configuration page.

Edit Picolo Audio Output Configuration page

The Edit Picolo Audio Output Configuration page displays a single panel allowing the user to edit the properties of a Picolo AudioOutput object.

1.7. PTZ Page

The PTZ page allows the user to view or edit the configuration of the serial port and the

PTZNode objects.

Serial Port Configuration panel

The Serial Port Configuration panel allows the user to view the properties of the serial port.

Serial Port Configuration panel fields description

Name Description

Baud Rate The baud rate of the serial port

Character Length Number of bits per character

Parity Bit Presence and polarity of the parity bit

Stop Bit Number of stop bits

Picolo.net User Guide 1. Using the Web Interface

Clicking on the Edit button opens the Edit Serial Port Configuration page.

Edit Serial Port Configuration Page

Edit Serial Port Configuration panel

The Edit Serial Port Configuration page displays a single panel, named Serial Port Configuration, allowing the user to edit the properties of the serial port.

Clicking on the Save Changes button in the lower right area saves the settings.

PTZNode panel

The PTZNode panel allows the user to view the properties of the corresponding PTZNode:

PTZNode panel fields description

Name Description

Maximum Number of Presets

Indicates the maximum number of presets supported by the PTZ protocol. 20 for Pelco-D protocol.

Home Supported

Indicates if the home command is supported by the PTZ protocol. True for Pelco-D protocol.

Serial Address The address given to the PTZ node

Clicking on the Change button assigns the serial address to the PTZ node.

Clicking on the Use PTZ button adds PTZ controls for this PTZ node.

Picolo.net User Guide 1. Using the Web Interface

Live Stream panel with PTZ controls

The Add button in the PTZ controls allows the user to recording the current PTZ position as a preset in the camera.

Note: A third-party software is still required to update or delete such presets.

1.8. Device Management Page

Network Tab 40 Time Tab 43 Discovery Tab 46 Maintenance Tab 47

Picolo.net User Guide 1. Using the Web Interface

Network Tab

The Network tab of the Device Management page allows the user to view or edit all the network related settings.

Network tab

Device Host Name Panel

● The Device Hostname panel allows the user to view and/or edit the device host name.

● Clicking on the Apply button registers the change. It will be effective after a device reboot.

Picolo.net User Guide 1. Using the Web Interface

IP Address Panel

● The IP Address panel allows the user to view and/or edit the device IP address and the sub-

net mask.

● When the From DHCP check box is checked, the IP address is obtained automatically using

DHCP. The IP and Subnet Mask fields reflect the values assigned automatically by the DHCP server. These values cannot be modified.

● When the From DHCP check box is unchecked, the user is allowed to change the IP and

Subnet Mask fields.

● Clicking on the Apply button registers the change. It will be effective after a device reboot.

DNS Panel

● The DNS panel allows the user to view and/or edit the IP address of the primary and

secondary DNS servers.

● When the From DHCP check box is checked, the IP addresses of the primary and secondary

DNSservers are obtained automatically using DHCP. The Primary DNS and Secondary DNS fields reflect the values assigned automatically by the DHCP server. These values cannot be modified.

● When the From DHCP check box is unchecked, the user is allowed to change the Primary DNS

and Secondary DNS fields.

● Clicking on the Apply button registers the change. It will be effective after a device reboot.

Default Gateways Panel

● The Default Gateways panel allows the user to view the IP address of the default gateways.

When the IP address of the device is statically assigned, default gateways can be added, edited, or deleted.

Protocols Panel

● The Protocols panel allows the user to Individually enable/disable the HTTP, HTTPS, and

RTSP protocols and assign a port number to each.

Picolo.net User Guide 1. Using the Web Interface

IP Change Panel

● After a change of the IP Adress settings, the IPChange panel is displayed. It indicates that the

IPaddress change will be effective only after rebooting the device.

● Clicking on the OK button returns to the last page. The Must reboot banner appears on top of

it:

Must reboot banner

Picolo.net User Guide 1. Using the Web Interface

Time Tab

The Time tab of the Device Management page allows the user to view or edit all the time and date related settings.

Time tab

Time and Date Panel

Name Description

UTC - Time The UTC (Coordinate Universal Time) time value.

UTC - Date The UTC (Coordinate Universal Time) date value.

Local - Time The local time value.

Local - Date The local date value. Expressed in YYYY-MM-DD format.

Local - Time Zone The local time zone rule. Expressed in POSIX.1 TZ string format.

GPS Time The UTC time provided by the GPS receiver device.

Time Source The source used for time and date synchronization.

● The Time and Date panel allows the user to view the time and date settings.

● The Time fields use the HH:MM:SS format. The Date fields use the YYYY-MM-DD format. The

Time Zone field use the POSIX.1 TZ string format.

Picolo.net User Guide 1. Using the Web Interface

● A Clock automatically adjusted for Daylight Saving Time message indicates that the DST rule

of the POSIX.1 TZ string is effectively considered by the Operating Systems.

● A Clock not automatically adjusted for Daylight Saving Time. message indicates that the DST

rule of the POSIX.1 TZ string is ignored by the Operating Systems.

● Clicking on the Set Time and Date button opens the Edit Date and Time page.

● When the automatic GPS with NTP method is used, Time Source reports either GPS or NTP

depending on whether a GPS device is actively providing time information.

Date and Time Panel

● The Date and Time panel of the Edit Date and Time page allows the user to modify all the time

and date settings.

● The Time Source drop-down box allows to select the source of the time synchronization.

□ NTP selects the automatic synchronization method using NTP protocol.

□ NTP + GPS enables USB GPS device to act as an NTP time source.

□ Manual selects the manual synchronization method.

Note: When manual synchronization method is selected, all the six fields of UTC Time area must

be properly filled with the actual values of the UTC time.

● The drop-down box in the Time Zone area provides a list of time zone sorted by increasing

UTC offset values. Selecting an item automatically fills the edit box with the corresponding POSIX.1 TZ string.

Note: The validity of the TZ rules is not guaranteed. Indeed, TZ rules are subject to modification

by civil authorities.

● The edit-box in the Time Zone area specifies the time zone rule expressed in POSIX.1 TZ string

format. An empty field means that the local time is equal to the UTC time.

● The Automatically adjust clock for Daylight Saving Time check box controls the application of

the DST (Daylight Savings Time) rule embedded in the time zone string. When checked, the device updates automatically the local time according to the DST rule. When unchecked, the device ignores the DST rule.

● Clicking on the Apply button immediately applies the settings.

Picolo.net User Guide 1. Using the Web Interface

NTP Panel

● The NTP panel allows the user to view and/or edit the IP address of the primary and

secondary NTP servers.

● When the From DHCP check box is checked, the IP addresses of the primary and secondary

NTPservers are obtained automatically using DHCP. The Primary NTP and Secondary NTP fields reflect the values assigned automatically by the DHCP server. These values cannot be modified.

● When the From DHCP check box is unchecked, the user is allowed to change the Primary NTP

and Secondary NTP fields.

● Clicking on the Apply button registers the change.

Picolo.net User Guide 1. Using the Web Interface

Discovery Tab

The Discovery tab of the Device Management page allows the user to view or edit all the device discovery settings.

Discovery tab

Discovery Panel

● The Device is discoverable check box controls the ability to discover the device on the

network using the discovery functions of the ONVIF Device Web Service. When checked, the device is discoverable. When unchecked, the device don't reply to the discovery request messages.

● Clicking on the Apply button applies immediately the settings.

Scopes Panel

● The Scopes panel allows the user to view and create ONVIF device scopes.

● Clicking on the Add Scope button opens a dialog box allowing to create a new scope.

● For user editable scopes, the panel provides an Edit button and a Delete button. Clicking on

an Edit button opens a dialog box allowing to modify the scope. Clicking on a Delete button opens a dialog box allowing to delete the scope.

Picolo.net User Guide 1. Using the Web Interface

Maintenance Tab

The Maintenance tab of the Device Management page allows the user to perform maintenance tasks.

Maintenance tab

Device Information Panel

Name Description

Model Product code and product name of the device

Manufacturer Manufacturer name of the device

Serial Number Serial number of the device

Firmware Version Major and minor firmware version numbers of the device

GPS Location GPS coordinates of the actual device location

IP Address IPv4 address of the device currently assigned to the device

MAC Address MAC Address of the LAN port of the device

Picolo.net User Guide 1. Using the Web Interface

Name Description

Hostname Host name currently assigned to the device

Internal Temperature Internal temperature of the device, expressed in °C

USB Storage

Indication of presence and capacity of an USB 2.0 compatible mass storage device (if any).

A [no GPS device connected] message indicates that there are no active GPS device attached to a USB port.

A no device message indicates that there are no storage device attached to a USB port.

Get Device Logs Panel

● The Get Device Logs panel allows the user to retrieve log files from the device.

● Clicking on the Get Systems Logs button initiates the download of the system.logs.tar.gz

file containing the system logs data.

● Clicking on the Get Access Logs button initiates the download of the access.logs.tar.gz

file containing the access logs data.

Note: In the log files, time is expressed in UTC time.

Reboot Device Panel

● The Reboot Device panel allows the user to reboot the device.

● Clicking on the Reboot Now button opens a dialog box allowing to initiate or cancel the task.

Revert Device to Factory Settings Panel

● The Revert Device to Factory Settings panel allows the user to revert the device settings to

their initial value at factory output.

● Clicking on the Revert Now button opens a dialog box allowing to initiate or cancel the task.

● The Reset network parameters check box controls the reverting of the network settings and

the user database. When checked, the network related settings and the user database are also reverted. When unchecked, the network related settings and the user database are not reverted.

Firmware Upload Panel

● The Firmware Upload panel allows the user to upload a firmware to the device.

● Clicking on the Browse button opens the file browser for example Windows Explorer allowing

to select the firmware image file to upload.

● Clicking on the Upload Firmware opens a dialog box allowing to initiate or cancel the task.

Picolo.net User Guide 1. Using the Web Interface

1.9. Users Management Page

The Users Management page allows a user (with sufficient rights ) to create and delete users and to view or edit user properties.

Users panel

● The Users panel of the Users Management page displays the list of users.

● Each list item contains the user name and the user level between square brackets, an Edit

and a Delete button.

● Clicking the Delete button deletes the user.

● Clicking the Edit button or the Create New User button opens the User Edition page.

Picolo.net User Guide 1. Using the Web Interface

User panel on the User Edition page

User panel

User panel fields description

Name Description

Username User name

Password User password

Confirm password User password again

Access Level User access level. Possible values: Administrator, Operator, User

Password Derivation Enable, disable and configure ONVIF password derivation.

Password Derivation

Password derivation allows the user of multiple devices to type the same string when authenticating on any device while the value stored on the device is actually different for each device.

Value Description

None

Onvif

1.0

No password derivation, the device password is directly typed by the user. Default setting.

The password is computed (derived) from the device identity and the user-typed string according to ONVIF 1.0 specification.

Onvif

2.0+

The password is computed (derived) from the device identity and the user-typed string according to ONVIF 2.0 (or later) specification.

1.10. Storage Page

The Storage page allows the user to mount/unmount USB storage media,

Picolo.net User Guide 1. Using the Web Interface

enable/disable/start/stop recording and list/preview stored media files.

The Storage page displays three panels:

□ Media Control

□ Recording Control

□ Stored Media

Media Control Panel

Media Control panel

The Media Control panel allows to control the USB media.

● 1669 Picolo.net HD1 automatically detects USB mass storage devices as they are plugged in.

□ Devices with a FAT32, exFAT and EXT4 file system are automatically mounted when

plugged in.

□ If the device is not listed, press [Refresh] on the media control panel to update the page.

□ Click on the mount USBmedia button.

● When mounted, the status field turns reports a ready condition together with the remaining

and the total capacity of the USB media.

● If 1669 Picolo.net HD1 does not recognize the file system format or if the root / partition

information is corrupted on the device:

□ It reports a "bad disk" status.

□ It offers to format the first (or only) partition of the device in EXT4.

You can safely unplug a device with the "bad disk" status.

● To unmount a USBmedia:

□ Click on the unmount USBmedia button.

□ The recording job stops and all pending data are written.

□ The status turns to 'idle safe for removal' to confirm the operation.

□ Remove the device or manually mount the partition again.

Picolo.net User Guide 1. Using the Web Interface

Recording Control Panel

Recording Control panel

The Recording Control panel allows the user to control the recording .

● To enable recording:

□ Ensure that the USBmedia is correctly mounted.

□ Ensure that the selected media profile exists and uses codecs compatible with MP4 file

format (H.264 and AAC only).

□ Adjust the minimum file size if required (a new file is created every time a new group-of-

picture starts and the file is greater than this value).

□ Configure the amount of storage the 1669 Picolo.net HD1 is allowed on the device if

circular recording is used or use 'unlimited' in the 'circular storage size'.

□ Click on the enable button. This automatically starts the recording if a disk is connected.

● To disable recording:

□ Click on the disable button.

The recording enable/disable settings is persistent. It is not affected by device reboot or by a power on/off/on cycle.

● To start recording:

□ The recording automatically starts when you enable the recording job.

● To stop recording:

□ Click on the stop button.

● To resume recording:

□ Ensure that the USBmedia is correctly mounted and the recording is enabled.

□ Click on the start button.

Picolo.net User Guide 1. Using the Web Interface

Stored Media Panel

Stored Media panel

The Stored Media panel lists the files recorded by the Picolo.net encoder on the USBmedia.

To download a file, click on the file name.

1.11. Layers Page

The Layers page allows the user to configure and position the OSD (On Screen Display) content.

The Storage page displays three panels:

□ TimeOSDConfiguration

□ UserOSDConfiguration (you can use any Chinese, Cyrillic, Greek, Japanese, Korean and

Latin characters).

□ AutoOSDConfiguration

Note:

- UserOSDConfiguration and AutoOSDConfiguration are not rendered on the HDMI output, but only on the encoded bitstreams.

- TimeOSDConfiguration is rendered on both encoded bitstreams and HDMI output.

TimeOSDConfiguration Panel

TimeOSDConfiguration panel

Picolo.net User Guide 1. Using the Web Interface

The TimeOSDConfiguration panel controls a hardware time stamp incremented at every frame.

Use the following controls to define the text display:

□ Select the Position of the text.

□ Set the Size (pt) of the font used.

□ Click on the setup button to apply the changes if the layer is shown.

□ Click on the hide / show button to enable or disable the text display.

UserOSDConfiguration Panel

UserOSDConfiguration panel

The UserOSDConfiguration panel controls a hardware time stamp incremented at every frame.

Use the following controls to define the text display:

□ Select the Position of the text.

□ Set the Size (pt) of the font used.

□ Enter the Text you want to display on the screen.

□ Click on the setup button to apply the changes if the layer is shown.

□ Click on the hide / show button to enable or disable the text display.

AutoOSDConfiguration Panel

AutoOSDConfiguration panel

Picolo.net User Guide 1. Using the Web Interface

The AutoOSDConfiguration panel controls a hardware time stamp incremented at every frame.

Use the following controls to define the text display:

□ Select the Position of the text.

□ Set the Size (pt) of the font used.

□ Click on the setup button to apply the changes if the layer is shown.

□ Click on the hide / show button to enable or disable the text display.

1.12. Hidden Pages

Check Status Page

The Check Status page URL is: http://[device-ip-address]/check-status for instance :

http://192.168.12.217/check-status.

Web Services Status panel

The Web Services Status field OK indicates that all the web services are up.

Picolo.net User Guide 2. Installing a Picolo.net

2. Installing a Picolo.net

2.1. Declarations

Notice for Europe

This product is in conformity with the Council Directive 2014/30/EU

This equipment has been tested and found to comply with Class A EN55022/CISPR22 and Class A EN55024/CISPR24.

This product has been tested in a typical class A compliant host system. It is assumed that this product will also achieve compliance in any class A compliant unit.

To meet EC requirements, shielded cables must be used to connect a peripheral to the card.

Notice for USA

Compliance Information Statement (Declaration of Conformity Procedure) DoC FCC Part 15

This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the FCC Rules.

These limits are designed to provide reasonable protection against harmful interference in a residential installation or when the equipment is operated in a commercial environment.

This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular

installation.

If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures:

● Reorient or relocate the receiving antenna.

● Increase the separation between the equipment and receiver.

● Connect the equipment into an outlet on a circuit different from that to which the receiver is

connected.

● Consult the dealer or an experienced radio/TV technician for help.

Picolo.net User Guide 2. Installing a Picolo.net

Notice for Korea

The following products have been registered under the Clause 3, Article 58-2 of Radio Wave Acts:

This product is in conformity with the European Union RoHS 2011/65/EU Directive, that stands for "the restriction of the use of certain hazardous substances in electrical and electronic equipment".

According the European directive 2012/19/EU, the product must be disposed of separately from normal household waste. It must be recycled according to the local regulations.

2.2. Precautions of Use

Damage caused by improper handling is not covered by the manufacturer warranty.

Risk of electrical shock

□ Do not operate the device with removed enclosure cover.

□ Use exclusively isolated DC power sources with the adequate voltage and power ratings.

□ Operate the device and its power supply only in a dry, weather-protected location.

Risk of permanent damage

□ Electronic devices can be damaged by electrostatic discharges.

□ Euresys devices are compliant with electrostatic discharges regulatory requirements.

However, it is required to apply any general procedure aimed at reducing the risk associated to electrostatic discharge.

Risk of malfunction due to EMI

□ Electronic devices can be disturbed by electromagnetic interferences.

□ Euresys devices are compliant with electromagnetic susceptibility regulatory

requirements. However, it is required to apply any general procedure aimed at reducing the risk associated to electromagnetic interferences.

Risks due to overheating

□ In case of inadequate cooling, the temperature of the device may become excessive,

leading to a device malfunction, permanent damage, and risk of fire.

□ The device is designed for fan-less operation and natural air convection cooling.

However, it is required to apply any general procedure aimed at facilitating the circulation of the air flow around the enclosure.

Risks due to poor grounding protection

Picolo.net User Guide 2. Installing a Picolo.net

□ Poor ground interconnection, ground loop or ground fault may induce unwanted voltage

between equipments, causing excessive current in the interconnecting cables. This faulty situation can damage the electronic devices and its peripherals.

□ The computer and the camera can be located in distant areas with distinct ground

connections.

□ The user must follow proper equipment grounding practices at all ends of the

interconnecting cables. In addition, it is recommended to use cable assemblies with overall shield solidly connected to the conductive shell of all connectors. Besides the beneficial effect of cable shielding on electromagnetic compatibility, the shield connection can increase the protection level against grounding problems in temporarily absorbing unwanted faulty current.

2.3. Installation

Box content

Quantity Items

1 8-pin (1x8) 3.81mm pitch terminal plug

1 4-pin (1x4) 3.81mm pitch terminal plug

1 2-pin (1x4) 3.81mm pitch terminal plug

1 1669 Picolo.net HD1 Installation Guide

DIN-rail mounting

The out-of-the box product is ready for installation on a DIN rail.

The DIN rail must be horizontal; two possible orientations are allowed: left facing connectors or right facing connectors.

Wall mounting

1669-DR Picolo.net HD1 (DIN rail) or 1669-DW Picolo.net HD1 (Desktop/Wall) enclosure

The out-of-the box product is ready for a desktop or a wall-mount usage. The enclosure is fitted with 4 oblong holes, 2 on each side, that can be used to attach the product on any flat surface.

Picolo.net User Guide 2. Installing a Picolo.net

Drill and mounting template

2.4. Connectors Location and Markings

1669 Picolo.net HD1 front panel

1669 Picolo.net HD1 rear panel

Picolo.net User Guide 2. Installing a Picolo.net

2.5. Connections

Audio/Video Inputs

Select one of the following options:

● Connect a HD-SDI or a 3G-SDI audio/video source to the SDI AUDIO/VIDEO IN female

BNCconnector.

● Connect an HDMI HD audio/video source to the HDMI type A (full size) input.

Audio/Video Output

Connect an HDMI HD audio/video sink to the HDMI type A (full size) output.

Analog Audio Input

Using a 3.5mm jack, connect an analog stereo (or mono) line-level audio sources to the AUDIO IN connector.

3.5 mm stereo jack

Analog Audio Output

Using a 3.5mm jack, connect an analog stereo (or mono) line-level audio sink to the AUDIO OUT connector.

Network

Connect the device to the local area network by attaching a RJ-45 network cable into the LAN connector.

USB External Storage

With a USBtype A (full size) connector, connects a USB storage device to any of the USB connectors.

Note: Devices exceeding 2.5 Wmust be powered externally.

Picolo.net User Guide 2. Installing a Picolo.net

USB GPS

With a USBtype A (full size) connector, connects a USB GPS device to any of the USB connectors.

Serial COM

Connect one serial device to the COMconnector via a 8-pin 3.81mm pitch terminal plug using one of the following wiring options:

● For a full-duplex RS-422 device:

a. Connect the TxD- and the TxD+ output signals respectively to the RxD- (pin 1) and the

RxD+ (pin 2) inputs of the 8-pin terminal plug

b. Connect the RxD- and the RxD+ input signals respectively to the TxD- (pin 3) and the TxD+

(pin 4) outputs of the 8-pin terminal plug

c. Connect the GND signal and/or the cable shield to the GND (pin 5 and/or pin 6) of the 8-

pin terminal plug

● For a half-duplex RS-485 device:

a. Connect the Data- and the Data+ signals respectively to the Rx/TxD- (pin 3) and the

Rx/TxD+ (pin 4) outputs of the COM connector 8-pin terminal plug

b. Connect the GND signal and/or the cable shield to the GND (pin 5 and/or pin 6) of the 8-

pin terminal plug

● For a RS-232 device:

a. Connect the GND signal and/or the cable shield to the GND (pin 5 and/or pin 6) of the 8-

pin terminal plug

b. Connect the Tx output signal to the RxD input (pin 7) of the 8-pin terminal plug

c. Connect the Rx output signal to the TxD output (pin 8) of the COM 8-pin terminal plug

COM connector

General Purpose I/O

Connect one alarm sensor device and/or one relay-driven device to the GPIO connector via a 4pin 3.81mm pitch terminal plug:

● To connect one alarm sensor, insert the 2 wires into INA (pin 1) and INB (pin2) of the 4-pin

plug.

Picolo.net User Guide 2. Installing a Picolo.net

● To connect one relay-driven device, insert the 2 wires into OUTA (pin 3) and OUTB (pin4) of

the 4-pin plug.

GPIOconnector

Note: The wiring polarity is irrelevant.

Power Input

Risk of damage to the product

Turn off or disconnect the power source before proceeding.

Connect a 12V DC power source to the POWER IN connector via a 2-pin 3.81 mm pitch terminal plug:

a. Connect the GNDto the GND input (pin 1) of the 2-pin terminal plug

b. Connect the +12V output to the +12V input (pin 2) of the 2-pin terminal plug

POWER INconnector

Note: 1675 Power Supply for Picolo.net HD1, a 12V DC 40 W universal power block is available as

accessory.

Risk of Permanent Damage

Electronic devices can be damaged by applying excessive or incorrectly polarized DC voltages. Use exclusively 12-24V DC power sources. Check power supply wiring before applying power.

2.6. Configuration

First Boot

1. Apply power and check if the Power OK green LED turns on.

2. Wait about one minute until the completion of the boot procedure.

Picolo.net User Guide 2. Installing a Picolo.net

3. Check if the Video Present LED indicators of all inputs attached to a valid video source are

turned ON.

First Network Session

1. Install the Euresys ONVIF Device Scanner application software utility on a Windows or

Linux computer attached to the same LAN.

2. Ensure that at least one of the following conditions is satisfied on the LAN:

a. A DHCP server is active and authorized to deliver an IP address for the MAC address of the

LAN interface.

b. The computer TCP/IP stack is configured for dynamic IP allocation.

3. Run the Euresys ONVIF Device Scanner utility. At the completion of the scanning process,

all discovered ONVIF devices appear in the discovered ONVIF devices list.

4. Select a device in the list by clicking its [IP] field. The right pane displays the properties of

the selected device.

5. Open the device Home page by clicking the [Show] button.

Note: The ONVIF Device Manager application software utility can also be used. ONVIF Device

Manager is available on : http://sourceforge.net/projects/onvifdm/

Manage the Media Profiles (Optional)

The Profile Management page allows the user to view/edit/delete and create media profiles. An auto-setup procedure that automatically creates media profiles suited to the connected cameras is also available.

Manage the Configurations (Optional)

The Configuration Management page allows the user to:

● View the video source configurations,

Picolo.net User Guide 2. Installing a Picolo.net

● View and edit the video encoder configurations,

● View and edit the metadata configurations.

Manage the Device (Optional)

The Device Management page has four tabs:

● The Network tab allows the user to view/edit the device host name, the IP address, the DNS,

and the default gateway settings.

● The Time tab allows the user to view/edit the time and date, and NTP settings.

● The Discovery tab allows the user to enable/disable the device discovery, and to manage the

ONVIF scopes.

● The Maintenance tab allows the user to reboot the device, to revert the device to factory

settings, and to upload firmware.

2.7. Final Check

Video stream from all cameras

Repeat the procedure for all active video sources:

1. Open the Profile Management page.

2. Select a media profile corresponding to the targeted video source, and click the [View/Edit]

button.

3. Show the Live Media pane. The video stream is displayed inside a window.

Note: The VLC plug-in must be installed on your computer. The VLC plug-in is available for

download from http://www.videolan.org/vlc/.

Picolo.net User Guide 3. Maintaining the Product

3. Maintaining the Product

3.1. Upgrading the Firmware

Note: The product is shipped with the latest version of the firmware available at the product

manufacturing time.

● You can upgrade, re-install or downgrade the embedded firmware using one of the following

methods:

□ The "Firmware Upgrade" capability of the ONVIF API.

□ The "Firmware Upload" panel available on the Device Management Page of the built-in

Web Server.

● Uploading the firmware does not explicitly erase the existing user configurations settings.

● For additional upgrade and downgrade information and limitation, please refer to the

section "Important Notices" on page1.

3.2. Configuring Backup and Restore

The user can backup and restore the user-defined configurations using the ONVIF Backup/Restore capability.

The configuration backup data includes:

● Network settings

● ONVIF Media Profiles

● Video Source Configurations

● Encoder Configurations

● Metadata Configurations

● PTZ Configurations

The configuration backup data excludes user account settings:

● User name

● User passwords

● User level

Picolo.net User Guide 4. Application Notes

4. Application Notes

4.1. Encrypted Media Storage

Describes structures and algorithms used to offer the AES-protected storage on USB media feature of the 1669 Picolo.net HD1.

Purpose

This application note describes the cryptographic chain used by 1669 Picolo.net HD1 to protect media content stored on external USB drives against content theft or forgery. In this early release of the product firmware, the protection relies on the knowledge of a passphrase by the operator of the HD1. Parties ignoring this passphrase will not be able to compute the appropriate keys used to encrypt the files and can neither decrypt intercepted files, nor produce alternate content and pretend it authentic, as the recipient will get garbage unless the expected key was used to create the files.

Note that further releases of product firmware will extend on these algorithms and file structures to use public/private keys cryptography to avoid having to re-enter the passphrase every time the device reboots.

Picolo.net User Guide 4. Application Notes

eCryptfs Encryption Layer

1669 Picolo.net HD1 takes advantage of kernel-integrated cryptography to encrypt media onthe-fly as they are written on external USB storage by means of the eCryptfs1kernel module. Files will then be encrypted with either AES-128 or AES-256, using Cipher Feedback mode (CFB), each file with its own “session key” (known as the File Encryption Key or FEK in eCryptfs codebase and documentation [1]).

One file, one key

Granting each file its own decryption key makes decryption of a new file hard even for an attacker who has access to a large stock of previously encrypted files and their decrypted counterpart. In order to keep the decryption manageable, eCryptfs does not presume that the recipient of the files will know all those keys, but instead encrypts the key with a “master key” (the File Encryption Keys Encryption Key – or FEKEK) according to the well-established PGP algorithms [3] (as described in IETF RFC2440).

To break the master key (and be able to decrypt a new file), the attacker would now need a large stock of session keys, both encrypted and decrypted.

Transparent File Management

Unlike many cryptography file-systems, which encrypt or decrypt blocks of the disk device, eCryptfs is an overlay that can be applied on any file-system technology (preferably with long file name support). This means files can still be moved, archived, organized, keeping their name and timestamps, shared to other systems and still be decrypted because each file is an autonomous container with the encrypted data and information on how to decrypt it for the intended recipient.

While the decryption process appears as “mounting” a folder in the file system on Linux platforms, it is perfectly possible for third-party applications to perform the same operations using a PGP library and some knowledge about the layout of eCryptfs files.

Simple management with Passphrase Mode

The most convenient mode of operation of eCryptfs consists in producing the master key internally from a character string known as the pass phrase. A passphrase being just a longer version of a password. PGP algorithms feature string-to-key functions that will combine hashing and cryptographic functions to produce a high-entropy, constant-sized key from that phrase, and ensure that the reverse is impossible to get. To make brute force attacks harder, some steps of that string-to-key are repeated multiple times.

www.ecryptfs.org

Picolo.net User Guide 4. Application Notes

eCryptfs Header

Byte address Content Usage

0-7 Unencrypted file size Generic management

8-15 eCryptfs special marker Identification

16-19 eCryptfs flags Identification

20-23 eCryptfs extent size Generic management

24-25 eCryptfs header extents count Generic management

26-(xx) RFC2440 authentication token packet set Cryptography

(xx)-(HS-1) Reserved

HS-eof Encrypted data Payload

The table above describes the layout of the information found in the eCryptfs header section, providing cryptographic material and generic information about the file.

□ The payload of the file is divided into "extents" (blocks of fixed size that can be

individually encrypted or decrypted on demand).

□ The "extent size" indicates how large in byte extents are in this file.

□ The "header extents count" indicates how much extents containing header/padding

information there are before the encrypted data.

Below is a hexadecimal dump of an eCryptfs file:

00000000 00 00 00 00 00 00 00 12

/* unencrypted file size */

0d 8f e7 a8 31 0e 50 5d

/* eCryptfs special marker*/

00000010 03 00 00 02

/* flags */ -- file format version == 03

-- properties = IS_ENCRYPTED

00 00 10 00

/* H.E.S.*/ -- Extent Size (big-endian)

00 02 -- # of headers extents

RFC2440 authentication token packet set> 8c 1d 04 07 03 01

00000020 00 11 22 33 44 55 66 77 60 da 4c 8e f7 92 60 08 00000030 61 c3 9d 59 09 73 d9 83 c4

ed 16 62 08 5f 43 4f

00000040 4e 53 4f 4c 45 00 00 00 00 5a 4a 2d 2e 49 56 73 00000050 f1 /** key signature */

00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

00000060 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

00002000 <encrypted data starts here: 2 * 0x1000>

Picolo.net User Guide 4. Application Notes

Is it an eCryptfs file ?

Read the special marker in the header extent. It contains two 32-bit, big-endian words w0 and w1 such that XOR(w0, w1) == 0x3c81b7f5. This is the signature of an eCryptfs file. You can then

check the flags in bytes 16 (file format version, expected to be 3) and 19 (properties, bit 1 set indicates an encrypted file).

Where does the encrypted payload start ?

The payload starts after <header extents count> blocks of <extent size> bytes. Here, this is 2 times 4096 (0x1000) bytes. We also know that the file will be only 18 bytes (<unencrypted file size>) once decrypted. Because eCryptfs uses block cryptography, this can be smaller than the size of the encrypted data section.

How to get the session key ?

The cryptography material is contained in the variable-sized authentication token packet set chunk, starting at offset 26 in the header extent. Each packet in this set starts with a type byte followed by one or more size byte(s) and finally some payload bytes, as defined in section 4.3 of RFC2440.

The current firmware for 1669 Picolo.net HD1 only supports passphrases to authenticate users of the encrypted storage, meaning that the only two packets expected in the set are:

● Symmetric key encrypted (packet tag 3), as defined in section 5.3 of the RFC

● eCryptfs key signature (packet type 0x2d) following the generic “literal data” structure

(packet tag 11) as described in section 5.9 of the RFC.

The key signature uniquely identifies the master key used to encrypt the session key contained in the tag-3 packet. eCryptfs uses it to look up for the corresponding key in its internal keyring.

According to §5.3 of the RFC:

● If the encrypted session key is present, the result of applying the S2K [string to key] algorithm to

the passphrase is used to decrypt just that encrypted session key field, using CFB mode with an IV [initialization vector] of all zeros.

● The decryption result consists of a one-octet algorithm identifier that specifies the symmetric-key

encryption algorithm used to encrypt the following Symmetrically Encrypted Data Packet, followed by the session key octets themselves.

Picolo.net User Guide 4. Application Notes

On the sample encrypted file, we can tell from the “string to key” specifier that we will have to use “iterated and salted” algorithm (specifier #3, described at section 3.6.1.3 of the RFC) using the SHA-512 hash algorithm (identifier #1), 65536 times.

Note: This is as currently used in the Linux

kernel implementation and it departs from the RFC2440 specifications.

The first 128-bit of the resulting hash gives us the “master key” required to decrypt the session key as indicated above.

Picolo.net User Guide 4. Application Notes

Web Services

The 1669 Picolo.net HD1 device can have its media store either locked or unlocked. When the store is locked, files previously written are not decrypted and newly recorded clips are stored as plain MP4 files. When the store is unlocked, AES decryption is applied to previous files and AES encryption is applied to incoming clips recorded by the device.

The LockAESStorage and UnlockAESStorage methods of the

HD1RecordingProprietaryService on the 1669 Picolo.net HD1 allow automation of the

switching between the two states of the media store.

Those services are complemented with a GetAESStorageStatus call that can be used to read the current state of the media storage directory and its name on the USB media.

Relevant XSD elements

<xs:element name="UnlockAESStorageRequest">

<xs:complexType>

<xs:sequence>

<xs:element name="PassPhrase" type="xs:string"/> <xs:element name="Directory" type="xs:string"/>

</xs:sequence>

</xs:complexType>

</xs:element>

The ‘unlock storage’ message provides the passphrase as plain string and the directory on the USB media that should be mounted (normally <device-serial-number>.<encoder-identifier>).

NOTE: using the UnlockAESStorage method will transmit the passphrase in clear text on the network unless the caller has established an https session to deliver its request.

NOTE: given the amount of computations needed to convert the passphrase into the appropriate master key, receiving the UnlockAESStorageResponse doesn’t guarantee that the directory is effectively protected. To confirm that the directory is protected, the caller should invoke GetAESStorageStatus and test the ‘encryption’ field.

<xs:simpleType name="EncryptionEnum">

<xs:restriction base="xs:string">

<xs:enumeration value="None"/> <xs:enumeration value="AES128"/>

</xs:restriction> </xs:simpleType> <xs:element name="GetAESStorageStatusResponse">

<xs:complexType>

<xs:sequence>

<xs:element name="Directory" type="xs:string"/> <xs:element name="encryption" type="tns:EncryptionEnum"/>

</xs:sequence>

</xs:complexType> </xs:element>

Picolo.net User Guide 4. Application Notes

References

1. https://www.kernel.org/doc/Documentation/security/keys-ecryptfs.txt

2. https://en.wikipedia.org/wiki/Block_cipher_mode_of_operation

3. https://www.ietf.org/rfc/rfc2440.txt

Picolo.net User Guide 4. Application Notes

Appendix

Cipher Feedback Mode for AES

Source: Wikipedia [2]

The cipher feedback mode - CFB - has the desirable properties that large, continuous blocks of identical data cannot be easily recognized but still allows to decrypt at random locations in the stream since only the previous ciphered text – not plain text – is required in addition to the key to decrypt a given block.

Picolo.net User Guide 4. Application Notes

4.2. [[[Missing Linked File System.LinkedHeader]]]

Coding Guidelines for VMS Application

Web Services

Web services inherited from Picolo.net HD4

feature

device discovery W3C discovery 1.0

list optional capabilities onvif core 1.0

firmware upgrade -- -- 1.0 only through web pages

network configuration onvif device 1.0 static IPv4 / DHCP

configure discovery onvif device 1.0

get system logs onvif device 1.0

system information onvif device 1.0

security configuration onvif device TBD

get temperature picolo.net device TBD

configure media profiles onvif media 1.0

live media streaming onvif streaming 1.0

RTP UDP/UDP multicast ietf RFC3550 1.0

RTP/RTSP/HTTP QuickTime

standard body

standard release comments

RTSP_ Over_ HTTP

1.0

RTP/RTSP/HTTPS - - 1.0

picolo.net 1.0 definition in this document

Auto-setup Profile picolo.net media 1.0

reference client implementation: gstreamer-1.0

Picolo.net User Guide 4. Application Notes

feature

Basic notification interface

Real-time Pull-point Notification Interface

Notification streaming interface

standard body

standard release comments

W3C wsn-b2 TBD

onvif events TBD

Configure PTZ nodes onvif ptz 1.0

Continuous Pan/tilt/zoom movements

onvif ptz 1.0

Stop PTZ movement onvif ptz 1.0

PTZ Presets management onvif ptz 1.0

Configure COM port picolo.net ptz 1.0

Custom messages on RSxxx connectors

onvif deviceIO 1.2

Control relay output onvif deviceIO TBD

Configure alarm input onvif deviceIO TBD

Services new to Picolo.net HD1

feature

start/stop recording

define recorded clip length

standard body

service release comment

onvif recording 1.0

picolo.net recording 1.0

through the SetRecordingJobMode() call. Recordings and RecordingJobs are statically defined.

through SetExtendedRecordingConfiguration () call, using the token matching the Recording object you want to configure

Picolo.net User Guide 4. Application Notes

Encrypted Live Stream Support

An additional web service GetPicoloHttpsUri() allows a client to know which URI to use to retrieve live captured media over TLS-protected connections.

The data stream carried over these HTTPS connections can be either MP4 file (containing H.264 video + AAC audio) or RTSP-tunnelled-over-HTTP, and is decided by the format argument passed to the service. Once the URI is retrieved by the client, the client is then responsible of setting up the proper protocol stack to communicate with the server located by the URI.

retrieving URI example (php)

// let $Addresses["Media"] correspond to Media->XAddr // in the reply to onvif's GetCapabilities() core service. $webServiceClients["MediaProprietary"] = new OnvifWebServiceClient("wsdl/hd4MediaProprietaryService.wsdl", $Addresses["Media"]); $svc = $webServiceClients["MediaProprietary"]->GetInstance(); $tunparams = array('format' => 'application/x-rtsp-tunnelled', 'ProfileToken' => $pagetoken); $uri = $svc->GetPicoloHttpsUri($tunparams);

The video/mp4 format can be passed as-is to an HTML5 compliant web browser for playback. The x-rtsp-tunnelled format can be requested by gstreamer-1.0 and converted into raw H.264 NALUs byte stream using the following components pipeline (tested on Ubuntu LTS 14.04):

gstreamer invocation

gst-launch-1.0 rtspsrc 'location=$uri' tls-validation-flags=generic-error \

!rtph264depay ! "video/x-h264,stream-format=byte-stream" \ ! filesink location=/tmp/example.h264

where

● $uri is the result of above php example and will start with rtspsh:// to indicate the use of

RTSP-over-HTTP and secure TLS connections.

● tls-validation-flags=generic-error indicate to skip X.509 certificate chains

● rtph264depay extracts the H.264 payload out of RTP packets

● video/x-h264,stream-format=byte-stream forces a \x00\x00\x00\x01 marker

between H.264 NAL units

● filesink places the bitstream as is in a file.

relevant XSD elements

<xs:simpleType name="PicoloHttpsStreamMime">

<xs:restriction base="xs:string">

<xs:enumeration value="video/mp4"/> <xs:enumeration value="application/x-rtsp-tunnelled"/>

</xs:restriction>

</xs:simpleType>

Picolo.net User Guide 4. Application Notes

<xs:element name="GetPicoloHttpsUriRequest">

<xs:complexType>

<xs:sequence>

<xs:element name="format" type="tns:PicoloHttpsStreamMime"/> <xs:element name="ProfileToken" type="tt:ReferenceToken"/>

</xs:sequence>

</xs:complexType> </xs:element> <xs:element name="GetPicoloHttpsUriResponse">

<xs:complexType>

<xs:sequence>

<xs:element name="MediaUri" type="tt:MediaUri"/>

</xs:sequence>

</xs:complexType> </xs:element>

WSDL additional definitions

<wsdl:message name="GetPicoloHttpsUriRequest">

<wsdl:part name="body" element="xsd:GetPicoloHttpsUriRequest"/> </wsdl:message>

<wsdl:message name="GetPicoloHttpsUriResponse">

<wsdl:part name="body" element="xsd:GetPicoloHttpsUriResponse"/> </wsdl:message> <wsdl:portType name="PicoloMediaProprietaryPortType">

<wsdl:operation name="GetPicoloHttpsUri">

<wsdl:input message="tns:GetPicoloHttpsUriRequest"/> <wsdl:output message="tns:GetPicoloHttpsUriResponse"/>

</wsdl:operation> </wsdl:portType>

Picolo.net User Guide 4. Application Notes

Reference Documents

● https://www.onvif.org/specs/DocMap-2.3.html

a. https://www.onvif.org/specs/core/ONVIF-Core-Specification-v230.pdf (device service,

event service)

b. https://www.onvif.org/specs/srv/io/ONVIF-DeviceIo-Service-Spec-v221.pdf

c. https://www.onvif.org/specs/stream/ONVIF-Streaming-Spec-v220.pdf

d. https://www.onvif.org/specs/srv/rec/ONVIF-RecordingControl-Service-Spec-v211.pdf

Euresys Picolo.net HD1 User Manual

Specifications and Main Features

Frequently Asked Questions

User Manual

1. Using the Web Interface

1.1. Introduction

1.2. Home Page

Login Page

1.3. Media Profiles Page

Media Profile Page

1.4. Configurations Page

Edit Video Encoder Configuration Page

Edit Audio Encoder Configuration Page

Edit Metadata Configuration Page

1.5. Digital Inputs & Relay Outputs Page

1.6. Audio Outputs Page

1.7. PTZ Page

1.8. Device Management Page

Network Tab

Time Tab

Discovery Tab

Maintenance Tab

1.9. Users Management Page

1.10. Storage Page

1.11. Layers Page

1.12. Hidden Pages

Check Status Page

2. Installing a Picolo.net

2.1. Declarations

2.2. Precautions of Use

2.3. Installation

2.4. Connectors Location and Markings

2.5. Connections

2.6. Configuration

2.7. Final Check

3. Maintaining the Product

3.1. Upgrading the Firmware

3.2. Configuring Backup and Restore

4. Application Notes

4.1. Encrypted Media Storage

Purpose

eCryptfs Encryption Layer

eCryptfs Header

Web Services

References

Appendix

4.2. [[[Missing Linked File System.LinkedHeader]]]

Coding Guidelines for VMS Application

Web Services

Encrypted Live Stream Support

Reference Documents