Milestone VMS User Manual

Milestone Systems
XProtect® Advanced VMS 2014
Administrator's Getting Started
Guide
Administrator's Getting Started Guide
www.milestonesys.com Contents
Contents
ABOUT THIS GUIDE ......................................................................... 5
PRODUCT OVERVIEW ..................................................................... 6
ABOUT LICENSES ........................................................................... 7
SYSTEM REQUIREMENTS ............................................................... 8
INSTALLATION OVERVIEW ............................................................. 9
INSTALLATION PRECONDITIONS ................................................ 10
DETERMINE INSTALLATION METHOD ................................................................... 10
DETERMINE SQL SERVER TYPE ......................................................................... 10
SELECT SERVICE ACCOUNT ............................................................................... 11
ACTIVE DIRECTORY .......................................................................................... 11
CUSTOMIZE IIS ................................................................................................. 11
ABOUT VIRUS SCANNING ................................................................................... 12
REGISTER SOFTWARE LICENSE CODE ................................................................ 13
INSTALL THE SYSTEM .................................................................. 14
INSTALL YOUR SYSTEM - SINGLE SERVER OPTION ............................................... 14
INSTALL YOUR SYSTEM - DISTRIBUTED OPTION .................................................... 15
INSTALL YOUR SYSTEM - CUSTOM OPTION .......................................................... 15
INSTALL THE RECORDING SERVER ...................................................................... 17
INSTALLATION FOR WORKGROUPS...................................................................... 18
CONFIGURE THE SYSTEM IN MANAGEMENT CLIENT ............... 19
CHANGE SOFTWARE LICENSE CODE .................................................................. 20
Administrator's Getting Started Guide
www.milestonesys.com Contents
INSTALL CLIENTS .......................................................................... 21
INSTALL XPROTECT SMART CLIENT SILENTLY ..................................................... 21
INSTALL MILESTONE MOBILE SERVER ................................................................ 22
DOWNLOAD MANAGER/DOWNLOAD WEB PAGE ...................... 23
PORTS USED BY THE SYSTEM .................................................... 25
FAILOVER RECORDING SERVERS (REGULAR AND HOT STANDBY)
......................................................................................................... 27
INSTALL A FAILOVER RECORDING SERVER ................................ ........................... 27
SETUP AND ENABLE FAILOVER RECORDING SERVERS .......................................... 27
ASSIGN FAILOVER RECORDING SERVERS ............................................................ 28
FAILOVER MANAGEMENT SERVER............................................. 29
MANAGEMENT CLIENT OVERVIEW ............................................. 30
ABOUT LOGIN AUTHORIZATION ........................................................................... 30
MANAGEMENT CLIENT WINDOW ......................................................................... 30
PANES OVERVIEW ............................................................................................. 32
MENU OVERVIEW .............................................................................................. 33
PRODUCT COMPARISON CHART ................................................ 35
INDEX .............................................................................................. 36
Administrator's Getting Started Guide
www.milestonesys.com
Copyright, trademarks and disclaimer
Copyright, trademarks and disclaimer
Copyright
2014 Milestone Systems A/S. Trademarks XProtect is a registered trademark of Milestone Systems A/S. Microsoft and Windows are registered trademarks of Microsoft Corporation. App Store is a service
mark of Apple Inc. Android is a trademark of Google Inc. All other trademarks mentioned in this document are trademarks of their respective owners. Disclaimer This text is intended for general information purposes only, and due care has been taken in its
preparation. Any risk arising from the use of this information rests with the recipient, and nothing herein should be
construed as constituting any kind of warranty. Milestone Systems A/S reserve the right to make adjustments without prior notification. All names of people and organizations used in the examples in this text are fictitious. Any resemblance
to any actual organization or person, living or dead, is purely coincidental and unintended. This product may make use of third party software for which specific terms and conditions may apply.
When that is the case, you can find more information in the file 3rd_party_software_terms_and_conditions.txt located in your Milestone surveillance system installation folder.
Administrator's Getting Started Guide
www.milestonesys.com
5
About this guide

About this guide

This guide briefly explains how to install your XProtect system as well as how to configure some of its basic features.
For detailed feature descriptions, procedures for configuration and maintenance, download the XProtect Advanced VMS manual from the Milestone website.
Your XProtect product also provides a very comprehensive built-in help system, that you can access by pressing F1 in the Management Client.
Check our website for updates to make sure you install the most recent version of our software.
Administrator's Getting Started Guide
www.milestonesys.com
6

Product overview

Product overview
This XProtect system is a fully distributed solution, designed for large multi-site and multiple server installations requiring 24/7 surveillance, with support for devices from different vendors. The solution offers centralized management of all devices, servers, and users, and empowers an extremely flexible rule system driven by schedules and events.
Your system consists of the following main elements:
The management server - the center of your installation, consists of multiple servers One or more recording servers One or more Management Clients The Download Manager One or more XProtect® Smart Clients.  One or more XProtect Web Clients and/or Milestone Mobile clients if needed
Your system also includes fully integrated Matrix functionality for distributed viewing of video from any camera on your surveillance system to any computer with XProtect Smart Client installed.
Your XProtect system installation can take place on virtualized servers or on multiple physical servers in a distributed setup.
The system also offers the possibility of including the standalone XProtect® Smart Client – Player when you export video evidence from the XProtect Smart Client. XProtect Smart Client – Player allows recipients of video evidence (such as police officers, internal or external investigators, etc.) to browse and play back the exported recordings without having to install any software on their computers.
Your system can handle an unlimited number of cameras, servers, and users and across multiple sites if required. Your system can handle IPv4 as well as IPv6.
Administrator's Getting Started Guide
www.milestonesys.com
7

About licenses

About licenses
When you purchase the system, you also purchase a certain number of licenses for the number of hardware devices, for example video encoders or cameras, that you want to run on the system. One hardware device license enables you to run as many camera, speaker, microphone, input, output and metadata devices that the hardware device consists of. It also enables you to run the hardware device multiple times on one site or multiple times on multiple sites.
You need a camera license for each enabled interconnected camera in a Milestone Interconnect setup.
If you purchase XProtect Access Control Module, you need a license for each door you want to configure for access control.
At first, when you have installed the various system components, configured the system, and added recording servers and cameras through the Management Client, the surveillance system runs on temporary licenses which need to be activated before a certain period ends. This is known as the grace period. You also need to activate licenses if you later add more cameras to the system.
When the new surveillance system is working, Milestone recommends that you activate your licenses before you make the final adjustments. If you do not activate your licenses before the grace period expires, all recording servers and cameras without activated licenses stop sending data to the surveillance system.
Administrator's Getting Started Guide
www.milestonesys.com
8

System requirements

System requirements
Important: Your system no longer supports Microsoft® Windows® 2003 (however, you can still
run/access clients from computers with Windows 2003). Important: Your system no longer supports Microsoft® Windows® 32-bit OS (however, you can still
run/access XProtect Web Client and XProtect Smart Client from computers with Windows 32-bit OS). For information about the minimum system requirements to the various components of your system,
go to www.milestonesys.com/systemrequirements.
Administrator's Getting Started Guide
www.milestonesys.com
9

Installation overview

Installation overview
In general, your installation is handled by one common installer. Depending on your selections, this installer installs all or some of the following components:
Management server, the center of your system installation. Typically installed on a dedicated
server.
Recording server, used for recording video feeds, communicating with cameras via video
device drivers and other devices. Typically installed on one or more separate computers. The video device drivers are automatically installed along with the recording server.
Management Client, used for configuration and day-to-day management of the system.
Typically installed on the system administrator's computer or similar.
XProtect Smart Client, feature-rich client used for accessing live and recorded video and
other features from your XProtect system. Must be installed on users' computers.
Service channel, enables automatic and transparent configuration communication between
servers and clients in your system. By default installed on the management server but, if you need to increase performance, it can be installed on another server.
Event server, handles alarms and maps. Does not have to be installed on the management
server, better performance can often be achieved by installing it on another dedicated server.
Log server, provides the necessary functionality for logging information from your system. By
default installed on the management server but, if you need to increase performance, it can be installed on another server.
When installing the event server or log server, the URL address of the management server is expressed like this: http//123.123.123.123. If installing the event server or log server on the management server itself, this should be specified as localhost. The address can also include a port, like this: http://123.123.123.123:2356 or http://Localhost:2356.
The common installer saves all components on the management server's download web page. Once you have run the installer, single components can be (re-)installed from the management server download web page.
Follow these links to get through the basic installation:
Installation preconditions (on page 10) Install the system (on page 14) Configure the system in Management Client (on page 19) Install clients (on page 21) Install a failover recording server (on page 27)
Administrator's Getting Started Guide
www.milestonesys.com
10

Installation preconditions

Installation preconditions
Read the installation preconditions before you start the actual installation.

Determine installation method

As part of the installation wizard, you must decide which installation method to use. Your selection depends on the organization needs, but has typically been determined when purchasing the system.
The options are:
Single Server: installs all management server components, recording server, and XProtect
Smart Client on the current computer. You only need to make a minimum of selections and all components are preselected in the un-editable component list. The SQL server is not in the list, but is also installed on the current computer.
Distributed: installs only the management server components on the current computer. This
means that the recording server and XProtect Smart Client are not visible in the un-editable component list. You must install the recording server, XProtect Smart Client, and SQL server on other computers.
Custom: allows you to select freely among all management server components, recording
server, and XProtect Smart Client to install on the current computer. By default, recording server is unselected in the component list, but you can edit this. Depending on your selections you must install the unselected component afterwards on other computers including the SQL
For easy user and group management, Milestone recommends that you have Microsoft Active Directory® in place before you install your system. If you add the management server to the Active Directory after installing, you must re-install the management server, and replace users with new users defined in the Active Directory.
server.

Determine SQL server type

Read the following information to determine which SQL server type is right for your organization: The Microsoft SQL Server Express Edition is a "lightweight" version of a full SQL server. It is easy to
install and prepare for use, and is often sufficient for systems with less than 300 cameras. If you plan to perform frequent/regular backups of your database, Milestone recommends using an
existing SQL server on the network (you must have administrator rights on the SQL server). For large installations (300 cameras or more), Milestone recommends using a full-scale existing SQL
server on a dedicated computer on the network. Milestone recommends that you install the database on a dedicated hard disk drive that is not used for
anything else but the database. Installing the database on its own drive prevents low disk performance.
If you select Distributed or Custom as part of the installation wizard, you must decide what to do regarding the SQL server.
If you do not have an SQL server installed, the options are:
Administrator's Getting Started Guide
www.milestonesys.com
11
Installation preconditions
Install SQL Server 2008 Express on this computer.  Use an existing SQL Server on the network: When you use a dedicated computer for the
SQL database on the network, the list of SQL servers that your account can access appears.
If you have an SQL server installed, the options are:
Use the installed Microsoft SQL Server Express database on this computer.  Use an existing SQL Server on the network: When you use a dedicated computer for the
SQL database on the network, the list of SQL servers that your account can access appears. You are also asked whether you want to create a new database, use an existing database, or
overwrite an existing database.
o Create new database: For a new installation. o Use existing database: If you are installing the database as part of upgrading to a newer
version of the system, and you want to use your existing database.

Select service account

As part of the installation wizard, you are asked to specify the service account that will access the management server and the recording server to manage the services:
 With a predefined network service account (This predefined user account), the service
always runs when the server (computer) are running - no matter which account is used. The account matters for access to various resources.
With a particular user account (This account), the service uses the specified user account to
run the service under the same account as the management server. If the server acting as management server is a member of a domain, you should either select the suggested Network Service or specify a user account for the domain.
If you use network drives, always specify a particular user account (with access to the network drives). Otherwise, the relevant service cannot access the required network drives.

Active Directory

If you want to add users through the Active Directory service, a server with Active Directory installed, and acting as domain controller, must be available on your network.
If you do not install Active Directory, follow Installation for workgroups (on page 18) when you start the installation.

Customize IIS

If you install on Windows Server 2008, Milestone recommends that you customize the standard IIS installation:
1. In Windows Start menu, select Control Panel, then select Programs and Features.
Administrator's Getting Started Guide
www.milestonesys.com
12
Installation preconditions
Product
TCP ports
XProtect® Corporate, XProtect® Expert
80, 8080, 7563, 25, 21, 9993
2. In the Programs and Features window, click Turn Windows features on or off. This opens the Windows Features window (window name may be different depending on which operating system you are installing the service channel on).
3. In the Windows Features window, expand Internet Information Services.
4. Expand and select Web Management Tools, then expand and select IIS 6 Management Compatibility, then select IIS Metabase and IIS 6 configuration compatibility.
5. Expand and select World Wide Web Services, then expand and select Application Development Features, then select the following:
.NET Extensibility ASP ASP.NET ISAPI Extensions ISAPI Filters.
6. Expand and select Security, then select Windows Authentication.
7. Click OK.

About virus scanning

As is the case with any other database software, if an antivirus program is installed on a computer running XProtect® software, it is important that you exclude specific file types and locations, as well as certain network traffic. Without implementing these exceptions, virus scanning uses a considerable amount of system resources. On top of that, the scanning process can temporarily lock files which likely results in a disruption in the recording process or even database corruption.
When you need to perform virus scanning, do not scan Recording Server directories containing recording databases (by default c:\mediadatabase\, as well as all folders under that location). Avoid also to perform virus scanning on archive storage directories. In older versions of the software, the databases are by default located in the installation folder, each being a subfolder with the MAC address of the device recorded.
Create the following additional exclusions:
File types: .blk, .idx, .pic, .pqz, .sts, .ts C:\Program Files\Milestone or C:\Program Files (x86)\Milestone and all subdirectories. Exclude network scanning on TCP ports:
Loading...
+ 25 hidden pages