Microsoft Endpoint Intune Mobile Managment - Axis Camera Pro app

[vazzman1972]

Hello,

Looking for some assistance regarding automating the push of the Axis Camera Pro app along with Axis account credentials to sign into the app to users don' t need to know the Axis Registered account to access published Camera Station Pro network devices.
Intune allows for App Configuration Profiles to push username/password credentials via XML and/or Configuration Designer via Integer/Real/String/Boolean

or via XML

We want to push these credentials so we don't have to provide the Master account credentials to users as a security measure, when the user leaves the company, they won't know what the credentials are for our Axis environment.

[github-actions[bot]]

This automatically generated reply acts as a friendly reminder.

Answers to your questions will most often come from the community, from developers like yourself. You will, from time to time, find that Axis employees answers some of the questions, but this is not a guarantee. Think of the discussion forum as a complement to other support channels, not a replacement to any of them.

If your question remains unanswered for a period of time, please revisit it to see whether it can be improved by following the guidelines listed in Axis support guidelines.

[Cacsjep]

Its long time ago using it but users should could normally Register an personal Account and you invite them so you dont need to Share your master/installion account, when User leave the company just remove it. Hope this is still correct ;)

[vazzman1972]

Unfortunately this won't work when using the Camera Station App on a SmartPhone. Using the App requires a single master Axis Registered account which is granted VMS (remote access) permissions to the LocalLive software (Axis Camera Station 5 or Pro) running at each local pc deployed at each site. Then local Windows user accounts are setup on each LocalLive pc to provide access to the network Axis cameras via the Camera Station Pro app.

[Cacsjep]

oh ok, then its only valid for AXIS Companion. Sre

[Cacsjep]

did u see this: https://help.axis.com/en-us/axis-camera-station-mobile-app#connect-to-local-and-port-mapped-systems currently i cant test but looks like you can use accounts. So no "Remote Secure Access", just old NAT, when you can do this

[vazzman1972]

Ya, I need to find out if the Camera Station 5 or Pro software allows for multiple master Axis registered accounts to sign in and/or have permissions to sign into the LocalLive.

[Cacsjep]

you dont need them because you dont will use "Remote Secure Access" so you just create the NAT Rules, create/configure user accounts and add the server like in the video. or do i missunderstand something ?

[vazzman1972]

Ok I will look into this….need to get one of my server guys involved. 😊 Thank you!

[vazzman1972]

Would it be the Connect to local and port mapped systems video you are referring to? https://help.axis.com/en-us/axis-camera-station-mobile-app#connect-to-local-and-port-mapped-systems

[Cacsjep]

yes it should be like using the windows ACS Client there you also just using the configured users, and not master account from axis.com

[Cacsjep]

note: https://faq.axis.com/s/article/which-ports-does-vms-use?language=en_US about NAT

[Cacsjep]

[vazzman1972]

Ahhh....yes! So the user creds would be the local windows user accounts that are setup and granted access with the Camera Station 5 /Pro software?

[Cacsjep]

correct =)

[vazzman1972]

I will have to check with our Perimeter Security folks to confirm if they will allow access to our private camera VLAN from the public internet.

[Cacsjep]

its very common setup, 99% of alarm receiving center systems have “drivers/SDKs” that allow them to work in this way. In my opinion, secure remote access feature is more for private users who have no knowledge of NAT

[Cacsjep]

also you have the data limit when there is not direct communitcation possible keep this in mind, so since you have then only one master acccount this could hit you..

[vazzman1972]

Unfortunately we have several sites in the field that their primary internet is Enterprise STARLINK, IP addresses change intermittently so this could cause grief. Do you know if multiple Axis accounts can be used as trusted accounts to register the Secure Remote Access for Camera Station 5 or Pro? Or will Camera Station 5/Pro only allow for one registered Axis account?

[Cacsjep]

you can always use dyndns for such scenarios, or use Starlink Business elon would be happy hehe

As you can see here, you can only configure one account for a ACS installation.