Video Management Software Installation Manual Issue 6.2.1

Video Management Software Installation Manual Issue 6.2.1 SECURITY MANAGEMENT SYSTEM 9600-0454

G4S Technology Limited. 2010 All rights reserved. No part of this publication may be reproduced in any form without the written permission of G4S Technology Limited. Challenge House, International Drive, Tewkesbury, Glos, GL20 8UQ, U.K. Telephone: +44 (0) 1684 850977 Video Management Software Installation Manual 9600-0454 Issue 6.2.1 26th January 2010 Microsoft and Windows are registered trademarks of Microsoft corporation. NovaBACKUP, NovaBACK, NovaDISK and NovaWare are registered trademarks of NovaStor Corporation. Intel, Pentium, Core and XEON are trademarks or registered trademarks of Intel Corporation. Verint is a trademark of Verint Systems Inc. All trademarks acknowledged. Image compression software is based in part on the work of the Independent JPEG Group. MPEG-4 Video components powered by ATEME

Contents 1 Chapter 1: Introduction... 3 About Video Managment... 3 About this Manual... 3 Digital Video Design Guide... 3 System Requirements... 4 Database Server or Standalone Machine... 4 Client Machine... 5 Symmetry NVR... 5 About MSDE Performance... 6 Windows Vista and Windows 7... 6 About the Windows Time Service... 6 Network Setup... 7 2 Chapter 3: Installing SQL Server... 8 Installing SQL Server 2005... 8 SQL Server 2005 Service Pack Installation... 12 Installing SQL Server 2008... 14 3 Chapter 4: SMS Quick Install Instructions... 17 Introduction... 17 Server Installation... 17 Client Installation (if applicable)... 18 Starting the SMS Software... 18 4 Chapter 5: Advanced SMS Installation... 19 Installing the SMS Software on the Server... 19 Installing IIS, FTP and WWW... 19 SMS Installation Procedure... 20 Checking the Service Monitor... 25 Installing a Language Pack... 26 Installing the Client Software... 27 Installing the Video Storage Management Module... 30 Starting the Client Software... 33 Default Login User Names and Passwords...33 Engineer Logins... 33 Command-Line Logons... 33 Network-Locking Command-Line Switch... 34 Microsoft Message Queue (MSMQ) and Active Directory... 34 5 Chapter 6: Removing the SMS Software... 35 Removing the Client Software from a Client PC... 35 Removing the Server Software... 35 Removing SQL Server 2000... 36 Removing SQL Server 2005/2008... 36 Removing the SMS Service Monitor... 36 A Appendix A: About the.ini File Settings... 37 MultiMAX.ini Settings... 37 B Appendix B: Configuring Email Alarms... 41 MAPI Email Alarms... 41 Installation at the SMS Server... 41 Installation at the Client Machines... 42 Video Management Software Installation Manual 1

Contents SMTP Email Alarms... 43 Requirements... 43 Installation at the Server... 43 Configuration at the Client Machines... 43 C Appendix C: Groups, Accounts and Authentication...44 Groups Created during Software Installation... 44 Accounts Used by the SMS Software... 44 Creating a Windows Account... 45 Assigning an Account to a Group... 46 Authentication... 46 Changing the Authentication Mode... 46 D Appendix D: Digital Video Recorder Setup...48 Verint Wavelet Recorders... 48 Troubleshooting Tips... 48 Verint Nextiva Troubleshooting... 48 Pelco Recorders... 49 E Appendix E: Installing and Using the Backup and Archive Software...50 Installing NovaBACKUP... 50 Configuring the Tape Drive... 51 Using the Backup and Archive Software... 51 About Archives... 51 About Backups... 51 Changing the Backup/Archive Configuration... 52 System Recovery Procedures... 52 MSDE Systems... 52 SQL Server 2000/2005/2008 Systems... 53 F Appendix E: Port Usage...56 Ports Used by the SMS Software... 56 2 Video Management Software Installation Manual

1 Chapter 1: Introduction About Video Managment Video Management is Security Management System (SMS) software that allows digital video to be viewed, recorded and replayed. The software is available as a video-only product, or as a component of an integrated security management solution that includes access control, intrusion, building control and other modules. About this Manual This manual explains how to install the video-only SMS software. If you want to install Video Management as a component of the integrated security management solution, please refer to the Security Management System (SMS) Software Installation Manual. This manual is intended to be used by technical staff who need to install or support the video-only SMS software. Digital Video Design Guide The Digital Video Design Guide provides information about system architectures, the components of digital video systems, the benefits, features, and the factors that need to be considered during the design of such a system. Before installing the software, it is essential to follow the guidance given in the Digital Video Design Guide to achieve a satisfactory system design and to obtain the full potential from the system. Video Management Software Installation Manual 3

Introduction System Requirements Note: Disk compression must not be used. Database Server or Standalone Machine The maximum number of clients is 9 (including Web clients). Note: The PC should not be used to view live or recorded video, other than for demonstration or occasional, light use. Item Operating System Processor 2 RAM 2 Hard Disk Optical Drive File System Monitor Backup Tape Drive Backup and Archive Software 4 Database Requirement 32-bit: Windows 7 1 Professional or Ultimate Edition, Windows Vista Business or Ultimate Edition (with SP2), Windows XP Professional (with SP3), Windows Server 2003 Standard Edition (with SP2) or Windows Server 2003 R2 Standard Edition (with SP2). See note p6 for Vista. Intel Core 2 Duo, 2.66GHz minimum (E6700). 1GB minimum. Use a minimum of 2GB if the PC is also used as a Symmetry NVR 1. A minimum of 5GB of available disk space is required for SMS use 3. An additional 250GB and network storage is needed if the PC is also used as a Symmetry NVR (see the Digital Video Design Guide). The SMS software is supplied on DVD. NTFS. 1024 x 768 minimum resolution. SCSI DAT (required if backup/archive to a SCSI tape device is used). The tape capacity must be sufficient for the size of hard disk. Windows 7 or Vista: NovaBACKUP v8.0 Professional Edition. Windows XP: NovaBACKUP v7.2 or v8.0 Professional Edition. Windows Server 2003: NovaBACKUP v7.2 or v8.0 Server Edition. Microsoft SQL Server 2000 Desktop Edition (MSDE), with SP4 (SP4 is installed automatically by the SMS installation wizard 3 ). Browser Internet Explorer 8. Email System If the MAPI Email Alarms feature is used, Microsoft Outlook 2000 or 2003 (with SP1) is required on the SMS database server and on the client where email alarms are to be configured. 1 Windows 7 must not be used on any machine used as a Symmetry NVR (Windows 7 can be used on clients that are used to view video from an NVR). No more than 20 cameras should be managed by a Symmetry NVR that is on the same PC as the SMS database server. (This is half the maximum number of cameras that can be managed by a standalone Symmetry NVR.) 2 The processor and RAM specifications given here are recommended for new PCs that need to give good performance under most conditions. Older machines with less RAM may provide adequate performance, particularly when Windows XP/2003 is used and there is no requirement to use the PC as a Symmetry NVR. 3 Optionally, the full SQL Server 2000/2005/2008 database software can be used, although Windows Server 2003 Standard Edition, or Windows Server 2003 R2 Standard Edition must be used, and the PC must have at least 200GB of available disk space. SQL Server 2005/2008 Express Edition are not supported. 4 It is possible to use software other than NovaBACKUP to back up the SMS databases and other files for disaster recovery. The Online Help for the Tools/Backup screen lists the files to back up. Please note that NovaBACKUP is required for data archiving. 4 Video Management Software Installation Manual

Introduction Client Machine Item Operating System Processor 1 RAM 1 Hard Disk Optical Drive File System Monitor Requirement 32-bit: Windows 7 Professional or Ultimate Edition, Windows Vista Business or Ultimate Edition (with SP2), Windows XP Professional (with SP3), Windows Server 2003 Standard Edition (with SP2) or Windows Server 2003 R2 Standard Edition (with SP2). See note page 6 for Windows Vista. The recommended processor type is Intel Core 2 Duo. The recommended processor speed depends on the number of digital video cameras (if any) simultaneously viewed at the client: 1-36 MPEG-4 cameras or 1-19 H.264 2 Cameras: 2.66GHz min.(e6700) 37-72 MPEG-4 cameras or 20-30 H.264 2 Cameras: 3.00GHz min.(e6850) 1-36 MPEG-4 cameras or 1-19 H.264 2 Cameras: 1GB minimum 37-72 MPEG-4 cameras or 20-30 H.264 2 Cameras: 2GB minimum A minimum of 1GB of available disk space is required for SMS use. The SMS software is supplied on DVD. NTFS. 1024 x 768 minimum resolution. Browser Internet Explorer 8. Email System If the MAPI Email Alarms feature is used, Microsoft Outlook 2000 or 2003 (with SP1) is required on the SMS database server and on the client where email alarms are to be configured. 1 The processor and RAM specifications given here are recommended for new PCs that need to give good performance under most conditions. Older machines with less RAM may provide adequate performance, particularly when Windows XP/2003 is used and there is no requirement to view video. When the PC is used to view video, the processor and RAM specifications assume that each camera uses a maximum 2CIF resolution (704x288 PAL; 704x240 NTSC) at 6 frames per second, with low motion and moderate detail. 2 H.264 cameras require additional processing and decoding. Therefore, fewer H.264 cameras can be viewed per PC. Symmetry NVR Each standalone Symmetry NVR should manage no more than 40 cameras. Item Operating System Processor RAM Hard Disk Optical Drive File System Network Requirement 32-bit: Windows Vista Business or Ultimate Edition (with SP2), Windows XP Professional (with SP3), Windows Server 2003 Standard Edition (with SP2) or Windows Server 2003 R2 Standard Edition (with SP2). See note page 6 for Windows Vista. Intel Core 2 Duo, 2.66GHz minimum (E6700). 2GB minimum. A minimum of 250GB of available disk space is required for SMS use. Additional network storage is required (see the Digital Video Design Guide). The SMS software is supplied on DVD. NTFS. 1Gbps if network storage is used. Video Management Software Installation Manual 5

Introduction About MSDE Performance SQL Server 2000 Desktop Edition (MSDE) does not limit the number of connections made to it. Instead, it applies a "workload governor", which limits performance of the database engine. If enhanced performance is or a database size exceeding 2GB is required, you must use SQL Server 2000/2005/2008 Standard or Enterprise Edition on the SMS database server. The database engine included in MSDE (and SQL Server 2000 Personal Edition) is tuned to support the workloads typical of a single user or a small workgroup. Although MSDE limits performance, it does not affect the range of features available from the SMS software. The workload governor reduces performance whenever MSDE processes more than five concurrent "Transact SQL batches" (background SQL tasks). The amount each batch is slowed down depends on how many batches over the five-batch limit are executing concurrently, and the amount of data retrieved by the individual batches. As more batches are executed concurrently, and as more data is retrieved by each batch, the more the governor slows down the individual batches. To report how often the workload governor is activated since MSDE was started, enter in a Command Prompt window (Start, Programs, Accessories): osql -E -Q "dbcc concurrencyviolation" The "-E" and "-Q" switches are case sensitive. Windows Vista and Windows 7 Before committing to using Windows Vista or Windows 7, please check that suitable drivers are available for any peripherals that are to be used. About the Windows Time Service The Windows Time service is installed by Windows. Its purpose is to allow synchronization of date and time of computers running on a Windows 2003/XP network. It is a fully-compliant implementation of the Simple Network Time Protocol (SNTP). It is recommended that an SNTP server is used to synchronize the time at the server, clients and Symmetry EN-9000 Series video servers. Care should be taken to ensure that the frequency of the time changes will not disrupt system performance. The Windows Time service (W32time) starts automatically on computers that are joined as part of a domain. For computers belonging to a peer-to-peer workgroup, the Windows Time service synchronization settings must be manually set up in the computer's registry. For Windows XP and Windows Server 2003 platforms, configuration is necessary, as described in Microsoft Knowledge Base articles 216734, 314054 and 816042, "How to Configure an Authoritative Time Server in Windows 2000/2003/XP". Additionally, Microsoft Knowledge Base Article 223184 describes the registry entries for the service. 6 Video Management Software Installation Manual

Introduction Network Setup Consider the following points when setting up the network. Computer Names - Do not use the underscore character in computer names. IP addresses The IP addresses of a server of any type must be fixed. Printer Setup - If scheduled reports are to be generated (Configure/History), you will need to make sure that the printer has been set up in both the user account and in the client services account on each client where scheduled reports are to be generated. If more than one printer is used, they must be installed in the same order in both accounts. Loss of Network Communications - If a client loses its network communications to the server, the client will continually attempt to re-establish communications over a period of time (default 10 minutes, as specified by the NCCT parameter in the multimax.ini file; see page 38). During this period, the client may appear to be 'locked up'. If communications are not re-established, the client reboots automatically. This process continues until network communications are restored. This automatic reboot process should be tested thoroughly during system commissioning. Video Management Software Installation Manual 7

2 Chapter 3: Installing SQL Server By default, the installation procedure installs MDSE automatically on the SMS database server if MSDE or SQL Server 2000/2005/2008 is not already installed. However, MSDE restricts performance and database size (page 6). If you want to use SQL Server 2000/2005/2008 on the SMS database server, install it before installing the SMS software. Installing SQL Server 2005 Prerequisites: You must log in with administrator privileges to install Microsoft SQL Server 2005. You must have previously created an account in which to run the SQL services. This must be a member of the Administrators group. If a Domain account is required, it will need to be added into the Domains Active Directory by a Domain administrator. When creating the account, select Password Never Expires. See page 45 for details of how to create a local account. The computer must have Internet Explorer 8. Other minimum system requirements are described on page 4. This chapter explains how to install SQL Server 2005. If you need to re-install SQL Server 2000, please refer to issue 6.1 or earlier of the Software Installation Manual. To install SQL Server 2005: 1. Close down other Windows applications. 2. Begin the installation of Microsoft SQL Server 2005. 3. If you see a screen similar to the following, click x86-based operating systems: If the splash screen is not displayed, start AutoPlay from the media rightclick menu. 8 Video Management Software Installation Manual

Installing SQL Server 4. When you see the following, click Server components, tools, Books Online, and samples: 5. Click Run Program if you see compatibility issue warnings that can be overcome by installing the latest SQL service pack (you will install the service pack later). 6. Follow the prompts, selecting the defaults until you see the following. Select SQL Server Database Services and Workstation components, Books Online and development tools, then click Next: Do not select Reporting Services, otherwise there will be a significant loss in performance. It is recommended that Analysis Services is not selected. Video Management Software Installation Manual 9

Installing SQL Server 7. Keep the default setting of Default instance, and click Next: 8. Complete the following, then click Next: Enter the username and password of the administrator account in which to run the SQL services. See page 9 for further information. Enter the domain name, or computer name if domains are not in use. Ensure that only SQL Server is selected. 10 Video Management Software Installation Manual

Installing SQL Server 9. Select Mixed Mode, and click Next: If you want to use Windows authentication, change the mode after installation, as described on page 46. Enter a password of your choice. 10. You can normally leave the following at the default settings. If you require SQL Server 2005 to sort words in lists, etc. using non-default sorting rules, select Collation designator and sort order and choose the appropriate option from the menu. Click Next to continue. Video Management Software Installation Manual 11

Installing SQL Server 11. You can leave the following at the default settings. Click Next to continue. 12. Follow the remaining prompts to completion. 13. Click Run Program if you see Visual Studio 2005 compatibility warnings. Note: The SMS software does not require Visual Studio 2005 service packs to be installed. However, if you want to install the service packs, they are available from the Microsoft web site. SQL Server 2005 Service Pack Installation The service pack must be installed after SQL Server 2005 has been installed. Note: The installation of the service pack can take some time. Do not be tempted to abort the installation process prematurely. To install the service pack: 1. At the SQL Server 2005 machine, double-click the service pack exe file on the server installation DVD (e.g. in the folder \Extras\SQL2005SP3). 2. Follow the prompts, keeping the default settings (including for Authentication). 3. Click Run Program if you see Visual Studio 2005 compatibility warnings. Note: The SMS software does not require Visual Studio 2005 service packs to be installed. However, if you want to install the service packs, they are available from the Microsoft web site. 12 Video Management Software Installation Manual

Installing SQL Server 4. On Windows Vista PCs, you will see the following: Make sure that the checkbox is selected, then click Finish. 4. On Windows Vista PCs, the User Provisioning Tool is displayed: In the User to provision field, enter the name of a Windows account that could be used to operate the SQL Server 2005 management tools (e.g. the name of the account used for the SMS services). Precede the name of the account with the server name and a backslash. Select Member of SQL Server SysAdmin role, click >, then OK. 5. Restart the PC on completion. Video Management Software Installation Manual 13

Installing SQL Server Installing SQL Server 2008 Prerequisites: You must log in with administrator privileges to install Microsoft SQL Server 2008. You must have previously created an account in which to run the SQL services. This must be a member of the Administrators group. If a Domain account is required, it will need to be added into the Domains Active Directory by a Domain administrator. When creating the account, select Password Never Expires. See page 45 for details of how to create a local account. The computer must have Internet Explorer 8. Other minimum system requirements are described from page 4. The following must be installed before installing SQL Server 2008 on a Windows Server 2003 R2 (SP2) platform:.net 3.5 SP1, Windows Installer hotfix KB942288, and Filestreaming hotfix KB937444. These are available from the Microsoft web site. To install SQL Server 2008: 1. Close down other Windows applications. 2. Begin the installation of Microsoft SQL Server 2008. 3. Click Run Program if you see compatibility issue warnings that can be overcome by installing the latest SQL service pack (you will install the service pack later). 4. Follow the prompts. Use the default settings except where shown next. Select Database Engine Services and Management Tools (Basic or Complete). Do not select Reporting Services, otherwise there will be a significant loss in performance. It is recommended that Analysis Services is not selected. 14 Video Management Software Installation Manual

Installing SQL Server Select Default instance. Change the settings in the Collation tab only if you want to sort words in lists, etc. using non-default sorting rules. Enter the name and password of the administrator account in which to run the SQL services. See page 9 for further information. Ensure that only SQL Server Database Engine is set for autostart. Video Management Software Installation Manual 15

Installing SQL Server Select Mixed Mode. If you want to use only Windows authentication, change the mode after installation, as described on page 50. Enter a password of your choice, and click Add to specify a database administrator account. 5. Install the latest SQL Server 2008 service pack, which is on the server installation DVD in the folder \Extras\SQL2008SP1. 16 Video Management Software Installation Manual

3 Chapter 4: SMS Quick Install Instructions Introduction In most cases, installation of the SMS software is extremely straightforward and requires selection of the default settings. This chapter explains the normal installation of the SMS software, which covers around 90% of cases. Follow these instructions if you want to install: The SMS software on a standalone machine. The SMS software on a Windows Workgroup network using standard database security. Please refer to Chapter 4 if the installation does not correspond to one of the above types, or if you require full details of the installation prompts, including the prompts needed for installations that use NovaBACKUP, MAPI email alarms or DVRs. Note: If NovaBACKUP is to be used, it is recommended that it installed prior to the installation of the SMS software databases and database components. See page 50. Server Installation Note: If you are using SQL Server 2000/2005/2008, the SMS software must be installed on the same computer as used by SQL Server. To install the SMS database server software: 1. Log in with Administrator privileges at the SMS database server. 2. Ensure that the IIS, FTP and WWW components are installed. 3. Insert the installation DVD and click the option to install the software. 4. Follow the prompts, selecting the defaults in all cases where provided. Video Management Software Installation Manual 17

Client Installation Client Installation (if applicable) To install the SMS client software on other machines: 1. Log in with Administrator privileges at the client. 2. Insert the client installation DVD and click the option to install the software. 3. Follow the prompts, selecting the defaults in all cases where provided. Starting the SMS Software 1. Start the SMS client software from the Start/Programs/Security Management System menu or from the desktop icon: The icon is available only for the user(s) specified during installation The text under the icon depends on the client type you are using. 2. When prompted, log into the SMS software. The default username and password for the installer are "installer" and "install" respectively. 18 Video Management Software Installation Manual

4 Chapter 5: Advanced SMS Installation Installing the SMS Software on the Server This chapter gives full details of how to install the SMS software for all installation types. Use this chapter only if you have unusual installation requirements. In most cases, the Quick Install Instructions given in Chapter 3 provide sufficient information to install the SMS software. If NovaBACKUP is to be used, it is recommended that it installed prior to the installation of the SMS software databases and database components. See page 50. Note: By default, the SMS database server is also installed with the SMS client software. You must log in to Windows with Administrator privileges to install the software. If you are installing the SMS software on a domain, log in as a domain administrator. Note: If you are using a Verint Nextiva DVR: If you are using v5.0 of the Nextiva SDK, DOTNET1.1 and DOTNET1.1 Service Pack 1 must be installed on all SMS PCs first. The installation files can be found in the Extras folder on the installation DVD. After installation of the Video Management software, install Nextiva hot fix 12 (located in the Extras folder) first on all Nextiva machines, then on each SMS machine. Both must have the same hot fix. If you are using a later version of the Nextiva SDK, please ask your Customer Support Representative for a compatibility update, which must be applied after installation. Installing IIS, FTP and WWW If you are using Windows XP or Windows Server 2003, it is necessary to install the Windows IIS, FTP and WWW (World Wide Web) components at the SMS database server before installing the SMS Video Management software. The procedure is described below. The components are not needed on clients, and the SMS install kit installs these components automatically on Windows 7 and Vista machines. Installation on Windows XP or Windows Server 2003: 1. Open the Windows Control Panel and start Add or Remove Programs. 2. Click Add/Remove Windows Components, shown on the left side of the screen. 3. For Windows Server 2003, select Application Server, then click Details. 4. A check (tick) mark is displayed next to Internet Information Services (IIS) if IIS is already installed. If no check (tick) mark is displayed, select the option. 5. Click Details, make sure that File Transfer Protocol (FTP) Service and World Wide Web Service are selected, then click OK. 6. Click Next and follow the prompts. Video Management Software Installation Manual 19

Advanced SMS Installation SMS Installation Procedure In most cases, installation is simple and requires selection of only the defaults. 1. Insert the installation DVD and wait for the installation wizard to start. If it does not start, doubleclick setup.exe on the DVD. The following is displayed if SQL Server or MSDE is not already installed: The specified language is used for sorting information in the SMS screens. If you require a different language, click Cancel to stop the installation process, open Regional and Language Options in the Windows Control Panel, select the language in the Advanced tab (Windows XP) or Administrative tab (Windows Vista), then restart the installation process. 2. Welcome Click Next at the Welcome screen. 3. Licensing Information Enter the serial number supplied with the DVD. 4. Software License Agreement Read the license agreement. Select I accept... and click Next if you agree. 5. Setup Type Choose Typical or Custom: If you choose Custom, you will have complete control over system configuration. Choosing Typical will cause defaults to be used for some settings. Choose Custom if you are using Windows authentication, Pelco DVRs, MAPI email alarms or NovaBACKUP. 20 Video Management Software Installation Manual

Advanced SMS Installation 6. Client/Server Selection (Custom only) If you do not want the SMS client software to be installed on the server, deselect Install the client software on this machine. Do not deselect Install the server software on this machine. 7. Database and Component Selection (Custom only) If MSDE is being installed, select the folder in which to install the MSDE (SQL) software and the SMS databases: 8. SMS Application Folder (Custom only) Select the folder in which to install the SMS software: 9. User Account Configuration (Typical and Custom) The settings in this dialog depend on the system and network type, as described below. Workgrouped network: If standard (mixed-mode) authentication (page 46) is to be used, select whether you want all Windows accounts on this machine to be able to use the SMS client software, or click Browse to select a specific user (administrator privileges are not needed). The SMS shortcut and the ACSUsers group privileges are assigned to all users/the selected user. Note: The prompt is irrelevant if the SMS client software is not being installed on the server and mixed-mode authentication is used. In this case, either option can be selected. If Windows authentication is to be used (page 46), all Windows accounts used to operate the SMS software at clients must also exist on the server, and each account must have ASCUsers permissions at the server and at the client. At the prompt, specify one account on the server using the Browse button. This will assign the account to the ACSUsers Video Management Software Installation Manual 21

Advanced SMS Installation group on the server. After installation, log on at the server and assign all other accounts that are to be used to operate the SMS client software to the ACSUsers group. Domain network, SMS client software being installed on server: Use the Browse button next to This User to specify the name of the Windows account that will be used to operate the SMS client software at the server. Select the domain, then the account. This installs the ACSUsers group on the specified domain and assigns the selected user to that group, which enables the user to operate the SMS software. The shortcut is also added for the user on the SMS database server. The SMS database server and clients must be part of the same domain. Domain network, SMS client software not being installed on server: Choose All Users, then click OK. The dialog shown next is displayed. Clicking Yes adds the ACSUsers group to the domain, but at this stage no users are assigned to the group (this will be carried out when installing the SMS clients). Make sure that the SMS clients and server are part of the same domain. Clicking No adds the ACSUsers group to the local machine only. You should select No only if you do not want to use domain-level privileges. Note: If Windows authentication is used (page 46), you will need to make sure that the Windows accounts used by SMS users at clients also exist on the SMS database server. 10. Services Account Configuration (Custom only) Specify the Windows account that will be used to run the SMS services. You can use the built-in System account, or select an account of your choice using the Browse button. Note: Do not use the built-in System account if: Windows authentication, Pelco DVRs or MAPI email alarms are used. NovaBACKUP is being used. If you specify an account and are using MSDE, the SQL services are reconfigured to use the same named account. If you are using SQL Server 2000/2005/2008, use the same account as previously specified for the SQL services. The installation software will assign the account to the ACSUsers and ACSAdmin groups, and to the local Administrators account. 11. Digital Video Storage Location (Typical and Custom) The following dialog is relevant only if the SMS database server is also to be used as a Symmetry NVR. It enables you to specify the folder in which to store video recordings. You can choose to save recordings on the current machine, or on a different machine (Remote Storage). If you choose Remote Storage, you need 22 Video Management Software Installation Manual

Advanced SMS Installation to specify an existing Windows account that the Symmetry NVR can use to log in to the remote machine. The account must have simple user rights and its password should not be able to expire. To ensure availability of space, it is recommended that you select a folder on a partition dedicated to storing the video recordings. If possible, you should not, for example, choose a folder on the partition used by the Windows paging file (normally c:). If this is unavoidable, open the Configure/Digital Video/Network Video Recorder screen after installation, and ensure that no more than 80% of the partition is reserved for recordings. 12. Digital Video Device User Account Configuration (Typical and Custom) Enter the username and password of a local Windows user account that devices such as Symmetry EN-9000 Series video servers can use to log on to the Symmetry NVR (which in this case, is the same machine as the SMS database server). If the username does not already exist, it will be created for you automatically. If you use an existing account, it must have simple user rights. 13. Select Features (Typical and Custom) Select the type of Digital Video Recorder you are using, if any: Only one DVR type per SMS installation is supported, including DVRs from the same manufacturer. You may see other recorders in this dialog. 14. NICE API Installation (Typical and Custom) If you selected NICE, you are prompted to confirm or choose the folder in which to install the NICE API (if it is not already installed). Video Management Software Installation Manual 23

Advanced SMS Installation 15. Your Computer Configuration (Custom only) Select the required options: Run System Timed Commands on Power Up This option determines what happens to scheduled commands stored on the server if it has been shut down, then restarted (e.g. after a power cut). If you select this option, any overdue scheduled commands stored on the server are actioned when the SMS services are restarted. Remove access to Windows Desktop If this is selected, the SMS client software starts automatically when Windows starts and no desktop will appear. Install the SMS Services Monitor Choose whether or not to install the Security Management System Service Monitor. This allows the status of SMS services to be monitored, stopped and started. 16. Backup Configuration (Custom only) Set the appropriate options in the following screen if you intend to use the Tools/Backup and Tools/Archive screens. Backup to Tape Selecting this option enables data to be backed up and archived to a SCSI tape drive using NovaBACKUP. The tape device must be connected to the server. Backup to Disk Selecting this option enables data to be backed up and archived to a selected folder on a disk using NovaBACKUP. Backup Folder Click the browse button, then select the backup folder. A UNC pathname must be used (e.g. \\SMSServer\backups), which is typically to a folder on a different computer, but can be to a folder on the same machine that you are currently using. Note: You can change the backup/archive configuration settings after software installation by using the Backup Configuration Utility (see page 52). 17. Start Copying Files (Typical and Custom) Select Next to begin installation. 24 Video Management Software Installation Manual

Advanced SMS Installation 18. A dialog displays an registration key and provides space for an activation code to activate the software, as shown next. 19. Go to https://register.g4tec.com to register, and enter the username and password on the Software License Certificate. Under exceptional circumstances if you do not have internet access, call the telephone number shown on the dialog. You will be asked for the serial number and registration key. In return, an activation code will be given to you. Enter the activation code in the space provided, then click Register Now. If you click Register Later, the activation code can be entered using the Install/Licensing/System Licenses screen. The software will not be available until you have entered the activation code. Checking the Service Monitor If you selected Install the SMS Services Monitor (see page 24), you will see the following icon in the System Tray (possibly with a red indicator in the top-left corner, rather than green): 1. Double-click on the icon to see the SMS Services: 2. After a short while, you should see that all the services have "Started". If the services have not started, restart your computer. If you need to remove the Services Monitor for security reasons, refer to page 36. Video Management Software Installation Manual 25

Advanced SMS Installation Installing a Language Pack If you require the security management system to use a language other than English (e.g. for the option names displayed in menus, text in screens, help, etc.), you must install the appropriate Language Pack on the server following installation of the databases. It is allowable to install the Language Pack after the system has been in use. You can install more than one Language Pack, and choose which one to use as the default in the Configure/Preferences/System screen of the SMS software. Although there is a default language, the Configure/User/Accounts screen allows each user to use any one of the installed languages. Install Language Packs only on the server - clients are updated automatically. To install a Language Pack: 1. Insert the Language Pack DVD. 2. Double-click Setup.exe on the DVD and follow the prompts. If you select Yes to the following prompt, the default language used by the SMS software will be set to the language you are currently installing. If you are installing the Language Pack after the SMS software has been in use for some time, and select Yes to this prompt, any existing users of the SMS software will have their language set to this language. 26 Video Management Software Installation Manual

Advanced SMS Installation Installing the Client Software Follow this section if you want to install only the SMS Client software. Note the following: The SMS database server software must have already been installed. The client software may be already installed on the SMS database server. You can install the client software on other machines using the separate client install DVD, if you wish. To install the client software: 1. Insert the client install DVD. 2. Wait for the Welcome dialog to be displayed (if it is not displayed, double-click setup.exe on the DVD). 3. Welcome Click Next at the Welcome screen. 4. Software License Agreement Read the license agreement. Select I accept... and click Next if you agree. 5. Setup Type Choose Typical or Custom: If you choose Custom, you will have complete control over system configuration. Choosing Typical will cause defaults to be used for some settings. Choose Custom if you are using Windows authentication or Pelco DVRs. 6. SMS Application Folder (Custom only) Select the folder in which to install the client software: 7. Database Server (Typical and Custom) Click Browse to select the SMS database server: 8. User Account Configuration (Typical and Custom) The settings in this dialog depend on the network type, as described next. Video Management Software Installation Manual 27

Advanced SMS Installation Workgrouped network: Select whether you want all Windows users of this machine to be able to use the SMS client software, or click Browse to select a specific user (administrator privileges are not needed). The selected user(s) are assigned the SMS shortcut and the ACSUsers group privileges. Domain network: You should use only This User field. (Selecting All Users assigns the SMS shortcut to all users of the machine, but will not attempt to assign any domain users to the ACSUsers group.) If you click Browse and select a user on the domain, the ACSUsers group is installed on the domain and the domain user is assigned to that group. If you click Browse and select a user on the local name, the ACSUsers group is installed on the local machine only, and the user is assigned to that group. You should use this only if you do not want to use domain-level privileges for Windows authentication. 9. Services Account Configuration (Custom only) You are prompted to specify the account in which to run the SMS services. You can use the built-in System account, or a named account. If you use a named account, use the same account used for the SMS services at the server (page 22). Note: If Windows authentication or Pelco DVRs are to be used, select Use this account 10. Select Features (Typical and Custom) Select the types of digital video recorder you are using (if any): IMPORTANT!!! Make sure that exactly the same recorder is selected here as was selected at the server. 11. NICE API Installation (Typical and Custom) If you selected NICE, you are prompted to confirm or choose the folder in which to install the NICE API (if it is not already installed). 28 Video Management Software Installation Manual

Advanced SMS Installation 12. Your Computer Configuration (Custom only) Select the required options: Remove access to Windows Desktop If this is selected, the SMS client software starts automatically when Windows starts and no desktop will appear. Install the SMS Services Monitor Choose whether or not to install the Security Management System Service Monitor at the client. This allows the status of SMS services to be monitored, stopped and started. 13. Start Copying Files (Typical and Custom) Click Next to begin installation. Video Management Software Installation Manual 29

Advanced SMS Installation Installing the Video Storage Management Module The optional "Video Storage Management Module" is used to create Symmetry NVRs, which store video from IP cameras or cameras connected to Symmetry EN-9000 Series video servers. The video is stored on a network storage device. Note: The Video Storage Management Module is automatically installed at the SMS database server when the SMS software is installed. The following procedure is necessary only if you want to create additional Symmetry NVRs. Note: If SQL server (rather than MSDE) is to be used for local storage of video indexes, install it now. MSDE is installed automatically if the Symmetry NVR stores video indexes locally and MSDE or SQL Server is not already installed. At each machine that is to be used as a Symmetry NVR (excluding at the SMS database server): 1. On Windows XP or Windows Server 2003 machines, make sure that the Windows IIS, FTP and WWW (World Wide Web) components are installed (see page 19). 2. Insert the install DVD. 3. Wait for the Welcome screen to be displayed (if it is not displayed, double-click setup.exe on the DVD). 4. Click Next in the Welcome screen. 5. Software License Agreement Read the license agreement. Select I accept... and click Next if you agree. 6. Licensing Information Enter the serial number supplied with the DVD. Each server you install requires a different serial number. 7. Choose Destination Location If displayed, select the folder in which to install the software: 8. Select Database Server If displayed, select the SMS database server: 30 Video Management Software Installation Manual

Advanced SMS Installation 9. Video Index Server Selection This determines where to store video index data (local machine or SMS database server). For performance reasons, select Use local machine for video indexes, unless you have an overriding need to store the video indexes centrally on the database server. 10. Microsoft SQL Server Desktop Engine Setup The following is displayed if you selected Use local machine for video indexes and MSDE or SQL Server is not already installed. Select the folder in which to install MSDE and the SMS indexes database: 11. Digital Video Storage Location The following dialog enables you to specify the folder in which to store video recordings. You can choose to save recordings on the current machine, or on a different machine (Remote Storage). If you choose Remote Storage, you need to specify an existing Windows account that the Symmetry NVR can use to log in to the remote machine. The account and its password should not be able to expire. To ensure availability of space, it is recommended that you select a folder on a partition dedicated to storing the video recordings. If possible, you should not, for example, choose a folder on the partition used by the Windows paging file (normally c:). If this is unavoidable, open the Configure/Digital Video/Network Video Recorder screen after installation, and ensure that no more than 80% of the partition is reserved for recordings. 12. Digital Video Device User Account Configuration Enter the username and password of a local Windows user account that devices such as Symmetry EN-9000 Series video servers can use to log on to the Symmetry NVR. If the username does not already exist, it will be created for you automatically. If you use an existing account, it must have simple user rights. Note: If you are using a domain-based network, you must make sure that the username and password specified here are exactly the same as specified in the same storage location prompt at the SMS database server (page 23). Video Management Software Installation Manual 31

Advanced SMS Installation 13. Start Copying Files Click Next to begin installation. 14. Select Existing NVR only if you want to replace an existing Symmetry NVR, or if you want to move the Symmetry NVR functions on the SMS database server to a dedicated PC: 15. Open the Install/Licensing/System Licenses screen at an SMS client and register each additional Symmetry NVR. The Symmetry NVR at the SMS database server does not need to be registered. 32 Video Management Software Installation Manual

Advanced SMS Installation Starting the Client Software To start the SMS software at a client. 1. Log into Windows. Use the account that you specified during the client software installation. 2. Start the SMS software from the Start/Programs/Security Management System Menu or from the desktop icon (the server must be running): 3. Log into the SMS software using one of the user names described next. Default Login User Names and Passwords The following default login names and passwords are provided. The engineer name and password are fixed, but for all others, you should ensure that they are changed as soon as possible. Name Password Permissions Group GUARD GUARD Guard Permissions ADMINISTRATOR ADMINISTRATOR Administrator Permissions MANAGER MANAGER System Manager Permissions INSTALLER INSTALL Installer Permissions ENGINEER INCOM Engineer Permissions Engineer Logins An engineer can log in only if permitted, as specified in the Configure/Preferences/System screen. The special engineer login disk must be inserted in the floppy-disk drive during the login process (this check can be disabled using the BypassFloppy ini file setting). In addition to having access to the Install options, an engineer can clear all alarms from the currently logged-in machine (View/Alarms). Tools/Set Password is not available to engineers. Note: You can create an engineer disk by inserting a blank floppy disk in the drive and doubleclicking on Engidisk.exe, which is on the SMS install DVD (use the Windows Explorer Search option to find the file on the DVD). Command-Line Logons It is possible to start and automatically log on to the SMS Software by specifying the username and password in the Windows command line. This feature can be useful to allow casual users of the Security Management System to log on easily. To start and log in from a Windows shortcut, select Command Line Logon in the Configure/Preferences/System screen and use the following command format in the Target field of the shortcut properties: "<Path to Multimax.exe>" /u"<username>" /p"<password>" Video Management Software Installation Manual 33

Advanced SMS Installation For example: "C:\Program Files\Security Management System\Multimax.exe" /u"alanc" /p"mypassword" Network-Locking Command-Line Switch You can use the following command-line switch when running the SMS software (multimax.exe): /N Clears the network locking table whenever the software is started. This may be necessary if users are prevented from using a screen because the system incorrectly believes that the screen is in use by another user. This may happen if, for example, the system has been shut down prematurely (e.g. by a power cut). For example: "C:\Program Files\Security Management System\Multimax.exe" /N You can run the SMS software with this switch by entering the full string as shown above in the Run dialog (displayed by selecting Run from the Start menu in Windows XP/2003, or by selecting Run from Start, All Programs, Accessories in Windows Vista or Windows 7). Note the space before /N and the use of double-quotes. Microsoft Message Queue (MSMQ) and Active Directory The SMS Setup kit installs MSMQ without Active Directory integration. Active Directory integration is not required by the SMS software, even when running under Active Directory. If Active Directory Integration is enabled in a Windows Workgroup environment, MSMQ reports errors to the Windows event log each time it fails to find the Active Directory server, which affects system performance. When promoting a machine from a Windows workgroup to an Active Directory domain, MSMQ Active Directory Integration is enabled automatically, and needs to be manually disabled at the SMS server and at each client as follows: Windows Vista and Windows 7: 1. Start Programs and Features in the Control Panel. 2. Select Turn Windows features on or off. 3. Fully expand Microsoft Message Queue (MSMQ) Server. 4. Deselect MSMQ Active Directory Domain Services Integration. 5. Restart Windows. Windows XP: 1. Start Add/Remove Programs in the Control Panel. 2. Select Add/Remove Windows Components. 3. Highlight Message Queuing and click the Details button. 4. Deselect Active Directory Integration. 5. Restart Windows. Failure to configure all machines consistently can result in a failure of MSMQ communications (e.g. when performing a reader status request). 34 Video Management Software Installation Manual

5 Chapter 6: Removing the SMS Software This chapter describes how to remove the software and databases, if it ever becomes necessary to do so (e.g. when a computer is replaced). Note: You must log in as an Administrator to remove the software. Removing the Client Software from a Client PC To remove the SMS software at a client PC: 1. Close down the client software and the SMS Service Monitor. 2. At the client, use the Windows Control Panel to remove: Video Storage Management Server if installed Security Management System If you are using the Nice digital video recorder, you may also want to remove NiceVision API Package. Data files are not removed from the installation folder; you can remove these using Windows Explorer. Note: You cannot remove only the client software at the server. Removing the Server Software Use the following procedure if you want to remove the database, client software and the various components used by the SMS software system at a server. 1. Close he SMS client software at each PC. 2. If the SMS client software is still installed on remote clients, go to each of these clients and stop all "SMS" services. Services can be stopped from the Administrative Tools Control Panel, or from the Security Management System Service Monitor. The databases may not be able to be deleted if you do not shut down the services. 3. Close the SMS Service Monitor on the server, if open. 4. Using the Windows Control Panel, remove the SMS software in the following order: a) Optional modules, such as "Video Storage Management Server". Video Management Software Installation Manual 35

Removing the SMS Software b) "Security Management System". You are prompted to choose whether to remove the SMS databases. If you choose to remove the databases, you are also prompted whether to remove MSDE (if used). If you are using the Nice digital video recorder, you may also want to remove NiceVision API Package. 5. Restart the computer, then remove the "Program Files\Security Management System" folder. Also remove the "Program Files\Microsoft SQL Server" folder if you have removed MSDE. Removing SQL Server 2000 If required, remove SQL Server 2000 as follows: 1. Open SQL Server Service Manager and stop all the running services. 2. Stop the SQL Server Service Manager by right-clicking on its icon in the System Tray, then selecting Exit. 3. Using the Windows Control Panel, remove Microsoft SQL Server 2000. 4. On completion, restart the computer, then remove the Program Files\Microsoft SQL Server folder. Removing SQL Server 2005/2008 If required, remove SQL Server 2005/2008 as follows: 1. Using the Windows Control Panel, choose to remove the main Microsoft SQL Server 2005/2008 program, and follow the prompts. When prompted, choose to remove all components/features. 2. For SQL Server 2005, also remove Microsoft SQL Server Native Client. For SQL Server 2008, also remove Microsoft SQL 2008 Server Native Client and the service pack (e.g. Microsoft SQL Server Compact 3.5 SP1 English). 3. On completion, restart the computer, and check that all Microsoft SQL Server programs have been removed. 4. Remove the Program Files\Microsoft SQL Server folder. Removing the SMS Service Monitor You may want to remove the Security Management System Service Monitor from the system tray of the server for security reasons. To remove the Service Monitor: 1. Log in to Windows as an Administrator. 2. Right-click the Windows Start icon and select Open All Users. 3. Double-click Programs. 4. Double-click Startup. 5. Remove SMS Service Monitor. 36 Video Management Software Installation Manual

A Appendix A: About the.ini File Settings MultiMAX.ini Settings This appendix describes the meaning of each entry in the multimax.ini configuration file found in the Windows Installation folder on each computer. After modifying multimax.ini, restart all SMS services and the SMS software on the PC where multimax.ini is located. [multimax] ScreenSaverPeriod=0 MainPath=\\SERVER\RootOnServer\ Program Files\Access Control System\ MicronodeSupport=0 This parameter instructs the SMS software's screen saver to operate after the defined period. The default is 0 seconds, indicating the screen saver is disabled. Path to the SMS files on the server. Not used. AIQ=1 Alarms Input Queue. This server-only parameter must be set to 1. DataImportEnabled=0 DataExportEnabled=0 CheckGrantedAccessCondCommand=1 ShowTimeZoneCode=0 TimeZoneCode= NoLeadingZerosOnBadge=0 ImportExportAllPersonalData=0 DeleteMSMQs=0 Not used. Not used. When this is set to 1 (the default), the SMS software checks whether each grant access transaction received is used in the "when" part of a trigger command. If grant access is not required to activate trigger commands, performance benefits are achieved by disabling this feature (i.e. setting to 0). Setting this parameter to 1 will cause all alarms and events displayed at the PC to be displayed with a 3-letter time zone code (e.g. "10:13 GMT"). The default of 0 prevents the time zone from being displayed. This parameter specifies the 3-letter time zone code for the computer. You can set TimeZoneCode to any 3-letter code. If TimeZoneCode is blank (the default), the PC's own setting is used (e.g. "GMT"). Not used. Not used. This is an engineering tool that deletes and recreates the SMS message queue (you may want to use this if alarms or other messages are not reaching their destination). With all of the SMS services running: 1. Set to 1 at a client to delete the message queue at the client, or set to 1 at the server to delete the message queue at the server. 2. Stop then restart the SMS services. The message queue is recreated and DeleteMSMQs is set to 0. Video Management Software Installation Manual 37

About the.ini File Settings DCOMRouter=0 BadgePrinter1= LocalPath=C:\Program Files\ Security Management System\ ServerName=SMSServer CTQ=1 Video=DX ShowPortEncryption=0 DVMTimeout=30 NCCT=600 FRCustCode= magicardprinter= datacardprinter= fargoprinter= StorageServerName= ActivityAndSystemReverseOrder=0 BypassFloppy=1 UseOldStatusScreen=0 StateChangeAllowed=1 For engineering use only; do not change. Not used. Specifies the destination folder of reports that are sent to a file. The reports are stored in the reports folder below this path. Do not change the drive letter. This is the name of the computer on which the databases are installed. Comms Transmission Queue. Set to 1 to enable communications from this PC. Not used. Not used. Specifies the maximum period of time (in seconds) that the SMS software will wait for a video recording to be retrieved from a digital video recorder. A recording that takes longer than this period to retrieve is seen as a timeout error. This is the maximum time that a client attempts to communicate with the server before it reboots. Not used. Not used. Not used. Not used. Specifies the name of the default Symmetry NVR, as shown in the Configure/Digital Video/Network Video Recorder screen. This optional parameter determines the order of items displayed in the View/History/Activity screen. Set to 1 to reverse normal order (0 is default). This optional parameter determines whether an engineer floppy disk must be inserted for an engineer to log in. The default is 0, i.e. disk required. If set to 1, the View/Command Center screen is non-graphical. When set to 0 (default), the View/Command Center screen is the graphical version. If set to 1 (default), the Alarms screen is maximized when an alarm is received. Set to 0 to disable. DisableScreenSaver=0 Set to 0 to allow the operating system screen saver to function. Set to 1 to disable the screen saver. Error.LogAllInEventLog=0 Set to 1 to enable reporting of NVR events in the Windows log. Set to 0 (default) to disable. ActivityByCompanyGroup=0 ReportIntegralMotionAlarms=0 Set to 1 and unset the View Menu By Company system preference to enable the Activity screen to display only information from companies in the user's company group. Setting to 0 (the default) and unsetting View Menu By Company enables the Activity screen to display information from any company belonging to any company group, irrespective of the user's own company group. Set to 0 to disable reporting of Pelco Integral motion alarms (default 1). 38 Video Management Software Installation Manual

About the.ini File Settings [Scheduler] DHMP=1 NSP=1 DLP=1 DTA=1 RSSPUP=0 Days/Hours/Minutes Processor. This is the scheduler for activity that occurs on a timed basis, e.g. scheduled commands at the server and timed reports at each client. Setting it to 0 disables such processing. Setting to 1 enables processing. Not used. Not used. Server-only setting for engineering use only; do not change. This is a server-only parameter. It is set to 1 if Run System Timed Commands on Power Up was selected during installation. [Comms] [Custom] [Recent File List] Not used. Not used. Added by Windows; ignore. [Shell] ClearNetworkTable=0 Must be set to 0 for a standalone system. Set to 1 if you wish to clear the network locking table (actioned when the SMS software is started). This must be set at the server only when the application has been shut down at all clients. Set back to zero when the operation is complete. [Transaction Service] TimeZoneCode= Specifies the time zone code of the transaction service. This parameter should be set to the same value as the parameter with the same name in the [SupportService] section. [SupportService] TimeZoneCode= [Control] [SmartCard] [DXvideo] [Cropping] [RovingClient] [Idscan] Specifies the time zone code of the support service. This parameter should be set to the same value as the parameter with the same name in the [TransactionService] section. Not used. Not used. Not used. Not used. Not used. Not used. [GraphicsAlarmView] Treewidth=180 For engineering use only; do not change. [Enterprise] [AppSize] Not used. This section saves the SMS window settings. Video Management Software Installation Manual 39

About the.ini File Settings [BadgeDesign] Not used. [Graphics] GraphicNameEqualsFileName=0 [G4TDigitalVideo] Matrix.DisableLoadLastView=0 StreamingRecordingMaxRetryCount=1 When set to 1, this optional parameter causes the Filename field in the Install/Graphics screen to be automatically set to the graphic filename. This section saves the digital video settings. When set to 1, this optional parameter prevents the Virtual Matrix screen from loading the last-used view when the screen is opened. Specifies the number of times that the SMS software attempts to reconnect to a camera after it has been disconnected. 40 Video Management Software Installation Manual

B Appendix B: Configuring Email Alarms Note: Each alarm to be sent by email must be configured in the Admin/Alarm/Definitions screen. The screen specifies whether the alarm is to be sent using a MAPI or SMTP email system. Alarm routing for email alarms must also be set up (Install/Alarm Routing screen). MAPI Email Alarms MAPI email systems are most commonly (but not exclusively) used within corporate intranets. If MAPI email alarms are used, Microsoft Outlook must be installed and set up at the server and at the client(s) at which email alarms are to be configured by users of the SMS software. Microsoft Outlook 2000 or 2003 (with SP1) is required on the SMS database server and on the client where email alarms are to be configured. Note: Installation and configuration Microsoft Outlook should be carried out with the help of the customer's Email Administrator. Installation at the SMS Server If MAPI email alarms are to be used, Microsoft Outlook must be installed at the server. That is, at the same machine that is used by MSDE. 1. Make sure that the SMS software is installed at the SMS database server. 2. Make sure that you are logged on at the server as the user set up to run the SMS services, as it is this user who will be used to send emails. Note: The account used for the SMS services must have an account on the Microsoft Exchange mail server. 3. Install and configure Microsoft Outlook with the help of the customer's Email Administrator. (Microsoft Outlook must be configured in conjunction with a Microsoft Exchange mail server.) 4. Double-click on EmailDef.exe, located in the "Disk1\Program Files\Security Management System\Extras" folder on the installation DVD. Video Management Software Installation Manual 41

Configuring Email Alarms 5. Choose the profile set up during the installation of Microsoft Outlook, then click Select followed by OK: There should be no need to use this option. It clears the current MAPI email alarms profile from the registry. Installation at the Client Machines At the client machine(s) where MAPI email alarms are to be configured: 1. Make sure that the SMS client software is installed. 2. Log on as an Administrator and install Microsoft Outlook. 3. Configure Microsoft Outlook to operate with the mail server. 4. Log out, then back in again as the Windows account used by the SMS services. 5. Start Microsoft Outlook and configure it to use the mail server. 6. Start the SMS software. 7. In the Install/Alarm Routing screen, configure an alarms routing to the client E-Mail Alarms. 8. Select Admin/Alarm/Definitions, and select a device alarm type. Choose the Email tab to specify the email recipient (contact). 9. Select Mail Type to be MAPI, then input the exchange mail account name that will receive the email alarms. Click Check, and confirm your profile name. If required, enter your password for the exchange server. If successfully authenticated, your mail account name will be underlined (verified) and you may now save the details by clicking OK. 42 Video Management Software Installation Manual

Configuring Email Alarms SMTP Email Alarms The SMTP protocol is almost universally recognized and used by internet mail servers, i.e. email systems provided by Internet Service Providers (ISPs). Requirements The following are required on the server and on any client used to configure/define SMTP email alarms: Internet Explorer 8. A working Internet Service Provider (ISP) dial-up/network connection (and account). If a modem is to be used, it must be configured to autodial on the account used for the SMS services on the server and the user account on the client. Note that ISPs usually allow only outgoing mail through their own SMTP servers when using their own connection accounts. Installation at the Server The server is used to send SMTP email alarms: 1. Log on to Windows using the SMS services account on the server. 2. If using a modem, open Control Panel/Internet Options. Select the Connections tab. 3. Ensure that Always dial my default connection is selected. 4. If using a LAN to connect to your ISP, ensure that your machine/network is configured for mail to be sent automatically by the server using the SMS services account. Configuration at the Client Machines On an SMS client: 1. In the Install/Alarm Routing screen, configure an alarms routing to the client E-Mail Alarms. 2. In the Admin/Alarm/Definitions screen, choose an alarm type, then open a device definition for the alarm you wish to send via SMTP email. 3. In the Admin/Alarm/Definitions screen, choose the Email tab. Select SMTP as the Mail Type. 4. Enter the SMTP Server address (usually of the format: username@ispname.com). This address must be allowed to send emails by your ISP. If you wish to confirm the validity of this server (using your current connection), click Check. 5. Enter the Mail From Address (the account displayed as the sender in any received email alarms). 6. Enter the Mail Alarm to address (any valid email address to send the email alarms to). Validate the entered details by pressing the Test button. This will confirm the SMTP Server and Mail alarm to addresses by attempting to send a test alarm to the account specified. If successful, the details will be underlined and a test email should now be awaiting collection in the recipient's email account (specified in Mail alarm to). 7. Click OK to save the details. Video Management Software Installation Manual 43

C Appendix C: Groups, Accounts and Authentication Groups Created during Software Installation When the SMS software is installed, the following groups are created automatically: A user group named ACSUsers. This contains the privileges necessary for a user to run the SMS software. The following rights are assigned: access this computer from the network; bypass traverse checking; log on locally; shut down the system. A user group named ACSAdmin. This user group has the standard ACSUsers group rights, plus full MSDE administrative rights. A user group named ACSGuest. This group gives read-only privileges to the transaction database. It enables Windows users to run third-party applications, such as reporting applications, which need to read the contents of the database. Assigning this group to an account does not enable the account to log into the SMS software. Accounts Used by the SMS Software The SMS software uses the following accounts: An account for SQL Server (if used). This must be a member of the local Administrators group on the PC where it is installed. The SMS user accounts. The Windows account of any user who needs to use the SMS client software must be assigned to the ACSUsers group. This is achieved through the "All Users/This User" prompt displayed during software installation: Note: Users can also be assigned to the ACSUsers group after installation (see page 46). For further information, see pages 21 (server installation) and 27 (for client installation). 44 Video Management Software Installation Manual

Groups, Accounts and Authentication An account for the SMS services. During the installation of the SMS software at the server and at clients, you are prompted for the name of a Windows account in which to run the SMS services. You can use the built-in local System account, or an account of your choice (which must already exist): Note: The built-in System account must not be used if Windows authentication (across PCs), Pelco DVRs or MAPI email alarms are to be used. If you specify an account, use the same account at the server and clients. If you are using Windows workgroup authentication, the account must be the same at the server and clients. The installation software will assign the account to the ACSUsers and ACSAdmin groups, and to the local Administrators account. An account for digital video, if the optional Video Management software is used. The account enables a Symmetry EN-9000 Series video server to connect to a Symmetry Network Video Recorder. You can choose an existing account, or specify a new account (which will be created for you). This account should have simple user rights; for security reasons, it should not be an administrator or a member of ACSUsers, ACSAdmin or ACSGuest. Creating a Windows Account To create an account on the local computer, right-click on My Computer (Windows XP) or Computer (Windows Vista or Windows 7) in the Start menu, select Manage, expand Local Users and Groups, then right-click on Users and choose New User: Video Management Software Installation Manual 45

Groups, Accounts and Authentication Assigning an Account to a Group To add an account to a group: 1. Click Groups in the Computer Management window (see previous section). 2. Double-click on the group. 3. Choose Add. 4. Click Advanced, Find Now, select the account, then OK. 5. Click OK in each dialog to save changes. Authentication By default, the SMS software uses mixed-mode (Windows and SQL) authentication to the SMS database, which makes it easy to set up a networked system. However, some high-security establishments prefer to use Windows-only authentication to provide a higher level of protection. With mixed-mode authentication, if a client cannot gain access to the SMS database through normal Windows authentication, SQL authentication is used instead. In a workgrouped environment, Windows authentication requires that the same Windows accounts and passwords used by SMS users on client machines also exist on the SMS database server. However, with mixed-mode authentication, this is not necessary. The choice of mixed-mode or Windows authentication can affect the choices made in the User Account Configuration (page 21) and Services Account Configuration (page 22) dialogs during software installation at both the server and clients. Note: With a standalone machine, the choice of mixed-mode or Windows-only authentication is not relevant, and the default mixed-mode authentication can be used. Changing the Authentication Mode By default, the SMS database uses mixed-mode authentication. If you want to change to Windowsonly authentication, please use the following procedure after installing the SMS databases. Note: The following assumes that you are using SQL 2000/2005/2008. If you are using MSDE, please contact Product Support for details of how to set MSDE in Windows-only authentication mode. 1. If you are using SQL Server 2005 under Windows Vista, log into Windows using the account selected in the User Provisioning Tool (page 13) 2. Start Enterprise Manager (SQL Server 2000) or SQL Server Management Studio (SQL Server 2005/2008). 3. Right-click on the server and select Properties. 4. If SQL Server 2000 is being used, display the Security tab, as shown next. 46 Video Management Software Installation Manual

Groups, Accounts and Authentication Select Windows only. Click OK and follow the prompts. 5. If SQL Server 2005/2008 is being used, click the Security page to display the following: Select Windows Authentication mode. Click OK and follow the prompts. 6. Close Enterprise Manager/SQL Server Management Studio. Video Management Software Installation Manual 47

D Appendix D: Digital Video Recorder Setup Verint Wavelet Recorders If a Verint M Series Wavelet DVR (Verint LVM) is being used, make sure that the following services are set to start automatically on the Verint recorder: CCTVware ComServer - Used by the SMS software to notify the recorder to archive event footage. CCTVware PlaybackServer - Provides recorded video feedback for the SMS software. CCTVware DataServer - Used by the SMS software to retrieve the camera names from the Verint unit. MSRecorder - Records video continuously. This records all pre-event video. Matrix server - This is needed if the recorder connects to a CCTV switcher. You can set up services to start automatically by selecting Control Panel/Administrative Tools/Services, double-clicking on the service and setting the Startup Type option to Automatic. Troubleshooting Tips If you are experiencing a difficulty in getting the Verint system to function, check that: a) The services are running on the Verint recorder, as described above. b) The digital video system is set up in the SMS installation screens as described in the Online Help. c) The Install/Digital Video Verint Camera screen references the correct Verint camera port. d) The Verint Video Codec installed by the SMS client software is running. This can be verified by examining the properties of wavelor.dll Video Codec, accessible from: Control Panel (Sounds and Audio Devices)/Hardware tab/video Codecs/Properties button/properties tab. Verint Nextiva Troubleshooting If you experience video irregularities with the Verint Nextiva when viewing menu overlays on the Video Matrix screen, please try the following adjustments to Windows: a) Right-click on (My) Computer, and select Properties. On Windows Vista or Windows 7 machines, click Advanced system settings. In the Advanced tab, click the Settings button in the 48 Video Management Software Installation Manual

Verint DVR Recorder Setup Performance area. In the Visual Effects tab, make sure that the Show shadows under... check boxes are deselected. b) On a Windows XP machine, open Display in the Windows Control Panel. Click the Advanced button in the Settings tab. In the Troubleshoot tab, reduce Hardware acceleration to the third position. The text under the control should show that the setting disables DirectDraw and Direct3D. Note: The current Vista drivers do not allow this change to be made. Pelco Recorders If you are using a Pelco DX8000 recorder, the SMS services must use a named account, not the builtin System account. An SMS user who wishes to view live or recorded video from a Pelco DVR must log into Windows using the SMS services account. Video Management Software Installation Manual 49

E Appendix E: Installing and Using the Backup and Archive Software Read this appendix only if you have purchased the third-party NovaBACKUP software, which is used for the online backup and archive functions (Tools/Archive and Tools/Backup). NovaBACKUP enables backups and archives to be sent to a device such as a SCSI tape drive or disk drive (e.g. on a network server). If NovaBACKUP is to be used, it is recommended that it installed prior to the installation of the SMS software databases and database components. If it is installed afterwards, the Backup Configuration Utility must be used as described on page 52. If backups are sent to tape, the tape unit must be connected to the server. Make sure that the tape unit is compatible with the SCSI board and NovaBACKUP. Use a SCSI DAT tape drive if sending backups or archives to a SCSI tape device. The tape capacity must be sufficient for the size of hard disk. Installing NovaBACKUP Note: Install and configure any required drives or adapter cards (such as a tape backup unit and SCSI adapter card) before installing NovaBACKUP. If you are going to back up to a tape device or to a disk located on the network (i.e. not to the local disk), you must select a named administrator account for the NovaBACKUP services during installation. The same account must be used for the SMS and SQL services. The versions of NovaBACKUP supported (see page 4) may not include latest version available. To install NovaBACKUP: 1. Log on with Administrator rights. 2. Insert the NovaBACKUP installation media into the drive on the server. The installation screen should be displayed automatically. 3. Choose to install all components. 4. Follow the installation prompts to completion. If required, you can choose the built-in System account for the NovaBACKUP services. 50 Video Management Software Installation Manual

Installing and Using the Backup and Archive Software If you have problems with the installation or configuration of NovaBACKUP, please refer to the NovaBACKUP manual or online help. Configuring the Tape Drive Any tape drives you use should configure automatically. However, if you suspect that a tape drive is not configured correctly, you can change the configuration settings as described in the NovaBACKUP online help. Using the Backup and Archive Software About Archives An archive is a copy of historical log data. Producing archives may be necessary for historical reporting purposes, since log data that is older than a specified number of days is deleted automatically, as specified by the Purge Daily Logs After option in the Configure/Preferences/System screen. Normally, the interval between archives should be slightly less than the Purge Daily Logs After value. For example, if Purge Daily Logs After is set to 90 days, archives should be taken every 89 days. On systems using the Microsoft SQL Server Desktop Engine (MSDE), databases are restricted to a maximum size of 2GB. If the transaction database grows to within 75% of this maximum (i.e. 1.5GB), the "Transaction Log Running at Capacity" alarm/event message is generated. The oldest data in the database is deleted automatically to keep the database size less than 1.5GB. The additional 25% of spare capacity is required to enable database restoration to take place from a backup. Depending on the customer's requirements, archiving may not be required at all; data older than a specified amount may not be of any interest. It is also important to know that if an archive is used to produce a report, the whole archive is re-inserted into the transaction database. Please refer to the Online Help for further information. About Backups A backup takes a copy of the SMS the databases and ini files. In the event of some corruption of the data, the backup enables the customer's data to be recovered, although in extreme circumstances, the whole system may need to be reinstalled (including Windows, etc.). Note: If the "Video Storage Management Module" is used, video recordings in the video storage folders must be backed up separately. Please refer to the Online Help for further information. Video Management Software Installation Manual 51

Installing and Using the Backup and Archive Software Changing the Backup/Archive Configuration During the installation of the SMS databases and database components, you are prompted to choose the backup/archive configuration settings (see page 24). The Backup Configuration Utility enables you to change these configuration settings after the SMS software has been installed. The utility is useful if, for example, you want to back up to disk rather than to tape. Installing the NovaBACKUP software after the SMS software without using the Backup Configuration Utility does not enable backups or archives to be produced from the SMS software. To use the Backup Configuration Utility: 1. Double-click on BackupConfig\BackupConfig.exe, located on the DVD used to install the databases. The following dialog is displayed, with your original configuration settings shown: 2. Complete the dialog, as described on page 24. Deselecting both options makes the NovaBACKUP software unavailable to the Tools/Backup and Tools/Archive screens. 3. Click OK and follow the prompts. System Recovery Procedures This section describes how to recover the SMS databases from backup media. MSDE Systems To recover the databases: 1. Shut down the SMS software at the server and at all clients. 2. Log in as an Administrator at the server. 3. Note the drive and installation folder of the SMS software (default folder is "Security Management System" in Program Files). 52 Video Management Software Installation Manual

Installing and Using the Backup and Archive Software 4. If you intend to uninstall MSDE, find out the location of "Microsoft SQL Server\Mssql\Data", including the drive letter, before you uninstall MSDE (the default is in the Program Files folder). Recovery requires the re-installed data directory to be located in the same logical location. 5. Remove the SMS databases and software (see page 35). 6. If you reinstall MSDE, when prompted for the "SMS Database Folder" (see page 21), make sure you use the same drive and installation folder as noted in step 4. Re-install the SMS software using the same location as noted in step 3. Check that the SMS software is functioning correctly. 7. Restore the databases from the backup media to the MSDE "Backup" folder (default is Program Files\Microsoft SQL Server\Mssql\Backup). 8. Using the Security Management System Service Monitor (double-click on the icon in the System Tray), make sure that the SQL Server service is running. 9. Insert the install DVD. 10. Open a Command Prompt window (Start, Programs, Accessories), then type the following, pressing Enter at the end of each line: <DVD-Drive>: (For example, E:) CD \Disk1\InstallDb\Recovery Restoredbs.bat ReAssignPerms.exe This restores the multimax, multimaxtxn and multimaxtxnops databases. Make sure that the process was successful by checking the log file, C:\Recovery.txt. This program ensures that the Symmetry permissions are configured in the database. The "AddPermissions.Log" and "RemovePermissions.Log" log files are produced in the "Security Management System\Scripts\DBA\Output" folder. 11. If the log files showed no errors, the server can be re-started and is ready for use. SQL Server 2000/2005/2008 Systems To recover the databases: 1. Shut down the SMS software at the server and at all clients including any SMS services that are running. 2. Log in as an Administrator at the server. 3. Note the drive and installation folder of the SMS software (default folder is "Security Management System" in Program Files). 4. If you intend to uninstall SQL Server 2000, find out the location of "Microsoft SQL Server\Mssql\Data", including the drive letter, before you uninstall SQL Server 2000 (the default is in the Program Files folder). This step is not necessary if you are uninstalling SQL Server 2005/2008. 5. Remove the SMS databases and software (see page 35). Video Management Software Installation Manual 53

Installing and Using the Backup and Archive Software 6. If you reinstall SQL Server 2000, you will be prompted for the "SMS Database Folder" (see page 21). If possible, use the same drive and installation folder as noted in step 4. 7. Re-install the SMS software, if possible using the same location as noted in step 3 (otherwise paths specified in the ini file at clients will need to be changed). Check that the SMS software is functioning correctly. 8. Shut down the SMS software at the server and at all clients including any SMS services that are running. 9. Restore the databases from the backup media to the SQL Server "Backup" folder (default is Program Files\Microsoft SQL Server\Mssql\Backup). 10. Using the Security Management System Service Monitor (double-click on the icon in the System Tray), make sure that the SQL Server service is running. 11. If you are using SQL Server 2000: a) Start Enterprise Manager (Start, All Programs, Microsoft SQL Server, Enterprise Manager), then open the server followed by the database tree. b) Right-click on the multimax database, select All Tasks, then Restore Database. Select From device, Select Devices, Add, and choose the filename of the backup file. Keep clicking OK until you return to the Restore Database dialog. c) Select the Restore checkbox next to the name of the backup set. c) Display the Options tab, then check the paths specified in Move to physical file name. These must match the path to the Data folder used by SQL Server 2000 (by default, Program Files\Microsoft SQL Server\Mssql\Data). If these paths (which are read from the backup file) are not correct, click and edit the paths. Make sure that the drive letter is correct. d) Select OK in the Restore database dialog to begin the restore process. 12. If you are using SQL Server 2005/2008: a) Start SQL Server Management Studio (Start, All Programs, Microsoft SQL Server 2005/2008, SQL Server Management Studio), then open the server followed by the database tree. b) Right-click on the multimax database, select Tasks, Restore, Database. Select From device, click the browse (...) button. In the Specify Backup dialog, click Add, then select the backup file. Keep clicking OK until you return to the Restore Database dialog. c) Select the Options page on the left side of the dialog, select Overwrite the existing database, and check the paths displayed. These must match the path to the Data folder used by SQL Server 2005/2008 (by default, Program Files\Microsoft SQL Server\Mssql\Data). If these paths are not correct, click and edit the paths. Make sure that the drive letter is correct. d) Select OK in the Restore Database dialog to begin the restore process. 13. If present, repeat step 11 or 12 for the multimaxtxn and multimaxtxnops databases. 14. Insert the SMS install DVD. 54 Video Management Software Installation Manual

Installing and Using the Backup and Archive Software 15. Select Start, Programs, Accessories, Command Prompt, then type the following, pressing Enter at the end of each line: <DVD-Drive>: (For example, E:) CD \Disk1\InstallDb\Recovery ReAssignPerms.exe This program ensures that the Symmetry permissions are configured in the database. The "AddPermissions.Log" and "RemovePermissions.Log" log files are produced in the "Security Management System\Scripts\DBA\Output" folder. 16. If the log files showed no errors, the server can be re-started and is ready for use. Video Management Software Installation Manual 55

F Appendix E: Port Usage This appendix lists the standard ports used by the SMS software. This information may be needed to configure routers, firewalls or port forwarding. Ports Used by the SMS Software Port Number 80/tcp 443/tcp 554/tcp 6456-7456/tcp 137/udp 21/tcp 135/tcp 3343/udp 1801/tcp or udp 3527/udp 2869/tcp 1900/udp 123/udp 3001/tcp 139/tcp 445/tcp 137/udp 138/udp 12090/tcp 1433/tcp 1434/tcp 3389/tcp 25/tcp or udp 53/tcp or udp Used by HTTP HTTPS RTSP RTP NETBIOS Name Resolution FTP (e.g. for Digital Symmetry NVR) RPC (DCOM/DTC/MSMQ/CLUSTER) Cluster Services for SMS clustered server. Microsoft Message Queue Microsoft Message Queue UPnP UPnP NTP/SNTP (used for Windows Time Server) NIC module comms to controllers File/Printer Sharing File/Printer Sharing File/Printer Sharing File/Printer Sharing SMS client network messaging MS SQL Server MS SQL Server Terminal Services for SMS Web Server SMTP - Port used for SMTP Email Alarms feature DNS 1433/1434 tcp Comms from Integral DSXpress and DSRealvue Xpress DVRs to SMS 56 Video Management Software Installation Manual

FTP Server Configuration Video Management Software Installation Manual 57