INDEX .............................................................................................. 36
Milestone XProtect® Advanced
VMS 2014
Administrator's Getting
Started Guide
www.milestonesys.com
Copyright, trademarks and disclaimer
Copyright, trademarks and disclaimer
Copyright
2014 Milestone Systems A/S.
Trademarks
XProtect is a registered trademark of Milestone Systems A/S.
Microsoft and Windows are registered trademarks of Microsoft Corporation. App Store is a service
mark of Apple Inc. Android is a trademark of Google Inc.
All other trademarks mentioned in this document are trademarks of their respective owners.
Disclaimer
This text is intended for general information purposes only, and due care has been taken in its
preparation.
Any risk arising from the use of this information rests with the recipient, and nothing herein should be
construed as constituting any kind of warranty.
Milestone Systems A/S reserve the right to make adjustments without prior notification.
All names of people and organizations used in the examples in this text are fictitious. Any resemblance
to any actual organization or person, living or dead, is purely coincidental and unintended.
This product may make use of third party software for which specific terms and conditions may apply.
When that is the case, you can find more information in the file
3rd_party_software_terms_and_conditions.txt located in your Milestone surveillance system
installation folder.
Milestone XProtect® Advanced
VMS 2014
Administrator's Getting
Started Guide
www.milestonesys.com
5
About this guide
About this guide
This guide briefly explains how to install your XProtect system as well as how to configure some of its
basic features.
For detailed feature descriptions, procedures for configuration and maintenance, download the
XProtect Advanced VMS manual from the Milestone website.
Your XProtect product also provides a very comprehensive built-in help system, that you can access
by pressing F1 in the Management Client.
Check our website for updates to make sure you install the most recent version of our software.
Milestone XProtect® Advanced
VMS 2014
Administrator's Getting
Started Guide
www.milestonesys.com
6
Product overview
Product overview
This XProtect system is a fully distributed solution, designed for large multi-site and multiple server
installations requiring 24/7 surveillance, with support for devices from different vendors. The solution
offers centralized management of all devices, servers, and users, and empowers an extremely flexible
rule system driven by schedules and events.
Your system consists of the following main elements:
The management server - the center of your installation, consists of multiple servers
One or more recording servers
One or more Management Clients
The Download Manager
One or more XProtect® Smart Clients.
One or more XProtect Web Clients and/or Milestone Mobile clients if needed
Your system also includes fully integrated Matrix functionality for distributed viewing of video from any
camera on your surveillance system to any computer with XProtect Smart Client installed.
Your XProtect system installation can take place on virtualized servers or on multiple physical servers
in a distributed setup.
The system also offers the possibility of including the standalone XProtect® Smart Client – Player
when you export video evidence from the XProtect Smart Client. XProtect Smart Client – Player allows
recipients of video evidence (such as police officers, internal or external investigators, etc.) to browse
and play back the exported recordings without having to install any software on their computers.
Your system can handle an unlimited number of cameras, servers, and users and across multiple sites
if required. Your system can handle IPv4 as well as IPv6.
Milestone XProtect® Advanced
VMS 2014
Administrator's Getting
Started Guide
www.milestonesys.com
7
About licenses
About licenses
When you purchase the system, you also purchase a certain number of licenses for the number of
hardware devices, for example video encoders or cameras, that you want to run on the system. One
hardware device license enables you to run as many camera, speaker, microphone, input, output and
metadata devices that the hardware device consists of. It also enables you to run the hardware device
multiple times on one site or multiple times on multiple sites.
You need a camera license for each enabled interconnected camera in a Milestone Interconnect
setup.
If you purchase XProtect Access Control Module, you need a license for each door you want to
configure for access control.
At first, when you have installed the various system components, configured the system, and added
recording servers and cameras through the Management Client, the surveillance system runs on
temporary licenses which need to be activated before a certain period ends. This is known as the
grace period. You also need to activate licenses if you later add more cameras to the system.
When the new surveillance system is working, Milestone recommends that you activate your licenses
before you make the final adjustments. If you do not activate your licenses before the grace period
expires, all recording servers and cameras without activated licenses stop sending data to the
surveillance system.
Milestone XProtect® Advanced
VMS 2014
Administrator's Getting
Started Guide
www.milestonesys.com
8
System requirements
System requirements
Important: Your system no longer supports Microsoft® Windows® 2003 (however, you can still
run/access clients from computers with Windows 2003).
Important: Your system no longer supports Microsoft® Windows® 32-bit OS (however, you can still
run/access XProtect Web Client and XProtect Smart Client from computers with Windows 32-bit OS).
For information about the minimum system requirements to the various components of your system,
go to www.milestonesys.com/systemrequirements.
Milestone XProtect® Advanced
VMS 2014
Administrator's Getting
Started Guide
www.milestonesys.com
9
Installation overview
Installation overview
In general, your installation is handled by one common installer. Depending on your selections, this
installer installs all or some of the following components:
Management server, the center of your system installation. Typically installed on a dedicated
server.
Recording server, used for recording video feeds, communicating with cameras via video
device drivers and other devices. Typically installed on one or more separate computers. The
video device drivers are automatically installed along with the recording server.
Management Client, used for configuration and day-to-day management of the system.
Typically installed on the system administrator's computer or similar.
XProtect Smart Client, feature-rich client used for accessing live and recorded video and
other features from your XProtect system. Must be installed on users' computers.
Service channel, enables automatic and transparent configuration communication between
servers and clients in your system. By default installed on the management server but, if you
need to increase performance, it can be installed on another server.
Event server, handles alarms and maps. Does not have to be installed on the management
server, better performance can often be achieved by installing it on another dedicated server.
Log server, provides the necessary functionality for logging information from your system. By
default installed on the management server but, if you need to increase performance, it can be
installed on another server.
When installing the event server or log server, the URL address of the management server is
expressed like this: http//123.123.123.123. If installing the event server or log server on the
management server itself, this should be specified as localhost. The address can also include
a port, like this: http://123.123.123.123:2356 or http://Localhost:2356.
The common installer saves all components on the management server's download web page. Once
you have run the installer, single components can be (re-)installed from the management server
download web page.
Follow these links to get through the basic installation:
Installation preconditions (on page 10)
Install the system (on page 14)
Configure the system in Management Client (on page 19)
Install clients (on page 21)
Install a failover recording server (on page 27)
Milestone XProtect® Advanced
VMS 2014
Administrator's Getting
Started Guide
www.milestonesys.com
10
Installation preconditions
Installation preconditions
Read the installation preconditions before you start the actual installation.
Determine installation method
As part of the installation wizard, you must decide which installation method to use. Your selection
depends on the organization needs, but has typically been determined when purchasing the system.
The options are:
Single Server: installs all management server components, recording server, and XProtect
Smart Client on the current computer. You only need to make a minimum of selections and all
components are preselected in the un-editable component list. The SQL server is not in the
list, but is also installed on the current computer.
Distributed: installs only the management server components on the current computer. This
means that the recording server and XProtect Smart Client are not visible in the un-editable
component list. You must install the recording server, XProtect Smart Client, and SQL server
on other computers.
Custom: allows you to select freely among all management server components, recording
server, and XProtect Smart Client to install on the current computer. By default, recording
server is unselected in the component list, but you can edit this. Depending on your selections
you must install the unselected component afterwards on other computers including the SQL
For easy user and group management, Milestone recommends that you have Microsoft Active
Directory® in place before you install your system. If you add the management server to the Active
Directory after installing, you must re-install the management server, and replace users with new users
defined in the Active Directory.
server.
Determine SQL server type
Read the following information to determine which SQL server type is right for your organization:
The Microsoft SQL Server Express Edition is a "lightweight" version of a full SQL server. It is easy to
install and prepare for use, and is often sufficient for systems with less than 300 cameras.
If you plan to perform frequent/regular backups of your database, Milestone recommends using an
existing SQL server on the network (you must have administrator rights on the SQL server).
For large installations (300 cameras or more), Milestone recommends using a full-scale existing SQL
server on a dedicated computer on the network.
Milestone recommends that you install the database on a dedicated hard disk drive that is not used for
anything else but the database. Installing the database on its own drive prevents low disk
performance.
If you select Distributed or Custom as part of the installation wizard, you must decide what to do
regarding the SQL server.
If you do not have an SQL server installed, the options are:
Milestone XProtect® Advanced
VMS 2014
Administrator's Getting
Started Guide
www.milestonesys.com
11
Installation preconditions
Install SQL Server 2008 Express on this computer.
Use an existing SQL Server on the network: When you use a dedicated computer for the
SQL database on the network, the list of SQL servers that your account can access appears.
If you have an SQL server installed, the options are:
Use the installed Microsoft SQL Server Express database on this computer.
Use an existing SQL Server on the network: When you use a dedicated computer for the
SQL database on the network, the list of SQL servers that your account can access appears.
You are also asked whether you want to create a new database, use an existing database, or
overwrite an existing database.
o Create new database: For a new installation.
o Use existing database: If you are installing the database as part of upgrading to a newer
version of the system, and you want to use your existing database.
Select service account
As part of the installation wizard, you are asked to specify the service account that will access the
management server and the recording server to manage the services:
With a predefined network service account (This predefined user account), the service
always runs when the server (computer) are running - no matter which account is used. The
account matters for access to various resources.
With a particular user account (This account), the service uses the specified user account to
run the service under the same account as the management server. If the server acting as
management server is a member of a domain, you should either select the suggested
Network Service or specify a user account for the domain.
If you use network drives, always specify a particular user account (with access to the network drives).
Otherwise, the relevant service cannot access the required network drives.
Active Directory
If you want to add users through the Active Directory service, a server with Active Directory installed,
and acting as domain controller, must be available on your network.
If you do not install Active Directory, follow Installation for workgroups (on page 18) when you start the
installation.
Customize IIS
If you install on Windows Server 2008, Milestone recommends that you customize the standard IIS
installation:
1. In Windows Start menu, select Control Panel, then select Programs and Features.
Milestone XProtect® Advanced
VMS 2014
Administrator's Getting
Started Guide
www.milestonesys.com
12
Installation preconditions
Product
TCP ports
XProtect® Corporate,
XProtect® Expert
80, 8080, 7563, 25, 21, 9993
2. In the Programs and Features window, click Turn Windows features on or off. This
opens the Windows Features window (window name may be different depending on
which operating system you are installing the service channel on).
3. In the Windows Features window, expand Internet Information Services.
4. Expand and select Web Management Tools, then expand and select IIS 6 Management Compatibility, then select IIS Metabase and IIS 6 configuration compatibility.
5. Expand and select World Wide Web Services, then expand and select Application Development Features, then select the following:
.NET Extensibility
ASP
ASP.NET
ISAPI Extensions
ISAPI Filters.
6. Expand and select Security, then select Windows Authentication.
7. Click OK.
About virus scanning
As is the case with any other database software, if an antivirus program is installed on a computer
running XProtect® software, it is important that you exclude specific file types and locations, as well as
certain network traffic. Without implementing these exceptions, virus scanning uses a considerable
amount of system resources. On top of that, the scanning process can temporarily lock files which
likely results in a disruption in the recording process or even database corruption.
When you need to perform virus scanning, do not scan Recording Server directories containing
recording databases (by default c:\mediadatabase\, as well as all folders under that location). Avoid
also to perform virus scanning on archive storage directories. In older versions of the software, the
databases are by default located in the installation folder, each being a subfolder with the MAC
address of the device recorded.
Create the following additional exclusions:
File types: .blk, .idx, .pic, .pqz, .sts, .ts
C:\Program Files\Milestone or C:\Program Files (x86)\Milestone and all subdirectories.
Exclude network scanning on TCP ports:
Loading...
+ 25 hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.