How to configure AXIS M3905-R to https only #871

Azarny · 2024-12-09T08:39:23Z

Azarny
Dec 9, 2024

Hello,
I'm working on configuring a M3905-R Camera via the different API's. We've managed to get the Event/Action API to work, but the request sent from the UI to configure the https-only mode of the camera is quite difficult, since we can't find the corresponding wsdl files anywhere.
The only wsdl I've found are here: https://www.axis.com/vapix-library/ws/
But in none of them (or the xsd) is a class that would allow me to configure the webserver.

The request sent in the UI looks like this:

<?xml version="1.0" encoding="UTF-8"?>
<Envelope xmlns="http://www.w3.org/2003/05/soap-envelope">
    <Header/>
    <Body>
        <SetWebServerTlsConfiguration xmlns="http://www.axis.com/vapix/ws/webserver"
                                      xmlns:acert="http://www.axis.com/vapix/ws/cert">
            <Configuration>
                <Tls>true</Tls>
                <ConnectionPolicies>
                    <Admin>Https</Admin>
                </ConnectionPolicies>
                <Ciphers>
                    <acert:Cipher>{{CIPHER}}</acert:Cipher>
                    <acert:Cipher>{{CIPHER}}</acert:Cipher>
                    <acert:Cipher>{{CIPHER}}</acert:Cipher>
                    <acert:Cipher>{{CIPHER}}</acert:Cipher>
                    <acert:Cipher>{{CIPHER}}</acert:Cipher>
                    <acert:Cipher>{{CIPHER}}</acert:Cipher>
                    <acert:Cipher>{{CIPHER}}</acert:Cipher>
                    <acert:Cipher>{{CIPHER}}</acert:Cipher>
                </Ciphers>
                <CertificateSet>
                    <acert:Certificates>
                        <acert:Id>{{CERT_ID}}</acert:Id>
                    </acert:Certificates>
                    <acert:CACertificates></acert:CACertificates>
                    <acert:TrustedCertificates></acert:TrustedCertificates>
                </CertificateSet>
            </Configuration>
        </SetWebServerTlsConfiguration>
    </Body>
</Envelope>

Could you provide the wsdl to configure the webserver, or help me how else I can set the camera to https-only via API?
Any help is much appreciated.

Answered by Azarny

Dec 20, 2024

I've got it working, it can be configured using REST as documented here: axis-os-hardening-guide, towards the end of the table in 'Enable HTTPS only'.

https://ip-address/axis-cgi/param.cgi?action=update&System.BoaGroupPolicy.admin=https
https://ip-address/axis-cgi/param.cgi?action=update&System.BoaGroupPolicy.operator=https
https://ip-address/axis-cgi/param.cgi?action=update&System.BoaGroupPolicy.viewer=https

It's not documented, but those are GET requests, and by sending those we can set the camera to https only.

View full answer

2024-12-09T08:39:34Z

github-actions[bot]
bot Dec 9, 2024

This automatically generated reply acts as a friendly reminder.

Answers to your questions will most often come from the community, from developers like yourself. You will, from time to time, find that Axis employees answers some of the questions, but this is not a guarantee. Think of the discussion forum as a complement to other support channels, not a replacement to any of them.

If your question remains unanswered for a period of time, please revisit it to see whether it can be improved by following the guidelines listed in Axis support guidelines.

0 replies

vivekatoffice · 2024-12-09T09:00:31Z

vivekatoffice
Dec 9, 2024
Collaborator

Hi @Azarny ,
I am not sure if you are looking for this: cert.xsd

Reference: 766

5 replies

Azarny Dec 9, 2024
Author

Hi @vivekatoffice
While the cert.xsd has the information about the certificateSet, it does not contain the information about the SetWebServerTlsConfiguration, Tls and ConnectionPolicies

vivekatoffice Dec 9, 2024
Collaborator

Hi @Azarny ,
I have noticed that vapix-library/ws/webserver.xsd is missing. Let me see if I can find the file on the device.

Azarny Dec 16, 2024
Author

Hi @vivekatoffice
Did you have any luck?

vivekatoffice Dec 16, 2024
Collaborator

Hi @Azarny ,
I have checked the device using SSH and only found the following files:

I am not sure how this API is working in Axis devices when http://www.axis.com/vapix/ws/webserver link is broken.

Have you tried asking here? Axis online helpdesk

Azarny Dec 16, 2024
Author

Thanks for your answer, I will try the helpdesk then.

Azarny · 2024-12-20T09:15:22Z

Azarny
Dec 20, 2024
Author

I've got it working, it can be configured using REST as documented here: axis-os-hardening-guide, towards the end of the table in 'Enable HTTPS only'.

https://ip-address/axis-cgi/param.cgi?action=update&System.BoaGroupPolicy.admin=https
https://ip-address/axis-cgi/param.cgi?action=update&System.BoaGroupPolicy.operator=https
https://ip-address/axis-cgi/param.cgi?action=update&System.BoaGroupPolicy.viewer=https

It's not documented, but those are GET requests, and by sending those we can set the camera to https only.

0 replies

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Axis Communications

How to configure AXIS M3905-R to https only #871

{{title}}

Replies: 3 comments 5 replies

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{title}}

Select a reply

Axis Communications

How to configure AXIS M3905-R to https only #871

Azarny Dec 9, 2024

Replies: 3 comments · 5 replies

github-actions[bot] bot Dec 9, 2024

vivekatoffice Dec 9, 2024 Collaborator

Azarny Dec 9, 2024 Author

vivekatoffice Dec 9, 2024 Collaborator

Azarny Dec 16, 2024 Author

vivekatoffice Dec 16, 2024 Collaborator

Azarny Dec 16, 2024 Author

Azarny Dec 20, 2024 Author

Azarny
Dec 9, 2024

Replies: 3 comments 5 replies

github-actions[bot]
bot Dec 9, 2024

vivekatoffice
Dec 9, 2024
Collaborator

Azarny Dec 9, 2024
Author

vivekatoffice Dec 9, 2024
Collaborator

Azarny Dec 16, 2024
Author

vivekatoffice Dec 16, 2024
Collaborator

Azarny Dec 16, 2024
Author

Azarny
Dec 20, 2024
Author