Canon CR-N500 Remote Camera Settings Guide - Page 113

Basic Measure 1: Setting Administrator Name and Password The administrator account has authority over all of the camera's settings and operations. If the administrator account is illegally used by an unauthorized party and tampering is done, there is a risk the camera will not be accessible. In order to prevent spoofing of the administrator account, the most fundamental measure for safe operation of the camera is to make the administrator name and password in an array of letters that are difficult to guess by unauthorized users. Strictly manage the administrator account and refrain from settings such as the same administrator account on multiple cameras. The administrator account needs to be set when the camera is started for the first time. After setting, editing can be done on the camera's Settings Page (P. 71).  Setting a Strong Administrator Name and Password In order to strengthen the administrator name and password, consider the following points: • Combine at least 10 characters of alphanumeric characters or symbols and special characters permitted for the camera. • Combine upper and lower case characters. • Avoid commonly used words and string of characters that are easy to guess.  Other Passwords For the camera, in addition to the administrator account, the password for Wireless LAN (P. 62), Server Certificate (P. 68), Authorized User (P. 71), and Encrypting Backup Information (P. 82) are to be set. Set these passwords in an array of letters that are difficult to guess by unauthorized parties and manage them appropriately. Basic Measure 2: Using the Latest Firmware The camera's firmware is updated as needed in order to improve performance of the functions and bug fixes. From the security point of view, it is important to always keep it updated because the measures against known vulnerabilities are applied to the latest firmware. Check Canon's website regularly at the initial setting after purchasing the camera and during its operation, whether the latest firmware is provided. The firmware version can be confirmed and updated on the camera's Settings Page (P. 80, 83). Basic Measure 3: Setting Date and Time Set the correct date and time for the camera. It is recommended to set the time to an NTP server if connected to the Internet. If there are indications that suspicious unauthorized access occurred, it may be possible to confirm the date and time of occurrence by checking the log. Date and time is set on the camera's Settings Page (P. 76). Basic Measure 4: Monitoring the Log Camera connection status and operating conditions are recorded and saved as a log in the camera embedded memory. Check the logs periodically to quickly find any signs of suspicious unauthorized access, such as repeated user authentication failures. For details on the log, refer to the "List of Log Messages" (P. 93). The logs will be deleted if any of the following operations are performed: rebooting, initialization, and restoring to the factory default settings. The log will also be deleted if exceeding a certain size. The log saved in the camera embedded memory can be confirmed on the camera's Settings Page (P. 84). 113