ONVIF has announced that it has officially released its ONVIF TLS Configuration Add-on 2.0.
This specification gives manufacturers and users a standardised way to establish secure, encrypted communication between ONVIF conformant devices and video management systems.
Version 2.0 adopts stronger methods of protecting that communication, keeping standards aligned with current cybersecurity best practices.
Manufacturers, integrators and end users face growing expectations to demonstrate the cybersecurity of the devices they build, install and operate, from government guidance and regulation to procurement requirements.
Conformance to the TLS Configuration Add-on gives manufacturers a common, testable approach to configuring TLS protection across products from different vendors.
The organisation is increasingly using versioned add-ons for security-related conformance requirements that must evolve as technologies and threats change. Add-ons are flexible, support version handling and extend conformance to features that address a specific use case or end user need.
Profiles are permanent, fixed feature sets that a complete product can be built on, which preserves backwards compatibility for products already deployed in the field. Products must conform to an ONVIF profile before claiming conformance to an add-on, so the two are complementary.
“By publishing security requirements in add-ons rather than in profiles, ONVIF can respond to changes in the security needs without asking the industry to wait for a new profile cycle, or to rebuild systems that already work,” said Leo Levit, Chairman, ONVIF Board of Directors. “Our release candidates for the TLS Configuration Add-on 2.0 and the Profile V Security Add-on are both examples of that approach in practice.”
The organisation has also applied the same cybersecurity approach with Profile V, its Release Candidate for cloud-based video surveillance.
Profile V conformant products must implement the ONVIF Profile V Security Add-on, which defines authentication and authorisation for cloud connections as well as encryption requirements for cloud recordings. The organisation intends to apply this model to future profiles whose security requirements need to evolve independently.
The first add-on to be introduced, the TLS Configuration Add-on lets a conformant video management system configure or update TLS settings in a conformant device.
ONVIF members can now access the TLS Configuration Add-on 2.0 Release Candidate and the associated test tools on the Member Portal here. The organisation expects to release the final specification at the end of 2026.
To read more ONVIF news, click here.
