{
    "api_version": "1",
    "kind": "dse_post",
    "self": "https://update.dsesecurity.com/api/v1/posts/kiwivision-confidential-stream-certificate-expiry/",
    "item": {
        "id": "https://update.dsesecurity.com/updates/kiwivision-confidential-stream-certificate-expiry/",
        "slug": "kiwivision-confidential-stream-certificate-expiry",
        "url": "https://update.dsesecurity.com/updates/kiwivision-confidential-stream-certificate-expiry/",
        "alternate_urls": {
            "markdown": "https://update.dsesecurity.com/updates/kiwivision-confidential-stream-certificate-expiry.md",
            "json": "https://update.dsesecurity.com/api/v1/posts/kiwivision-confidential-stream-certificate-expiry/"
        },
        "title": "Track certificate expiry for KiwiVision confidential recordings",
        "summary": "Include encryption-certificate validity in the recording continuity checks for KiwiVision confidential streams.",
        "format": {
            "slug": "guide",
            "name": "Guide"
        },
        "priority": {
            "slug": "info",
            "name": "Information"
        },
        "featured": false,
        "image": {
            "theme": "network-infrastructure",
            "label": "Networks & infrastructure",
            "alt": "Resilient network core with engineered blue and gold data paths.",
            "card_url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-card.webp?v=1.8.20",
            "hero_url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-hero.webp?v=1.8.20",
            "social_url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-social-v2.jpg?v=1.8.20",
            "width": 2400,
            "height": 1350
        },
        "topics": [
            {
                "slug": "cybersecurity",
                "name": "Cybersecurity",
                "url": "https://update.dsesecurity.com/topic/cybersecurity/"
            },
            {
                "slug": "video-surveillance",
                "name": "Video Surveillance",
                "url": "https://update.dsesecurity.com/topic/video-surveillance/"
            }
        ],
        "author": {
            "name": "DSE Security Editorial Team",
            "url": "https://update.dsesecurity.com/#editorial-team",
            "type": "Organization"
        },
        "publisher": {
            "name": "Detection Systems & Engineering",
            "url": "https://dsesecurity.com/"
        },
        "published_at": "2026-10-15T00:43:17+00:00",
        "modified_at": "2026-10-15T00:44:33+00:00",
        "reviewed_on": "2026-10-14",
        "reading_minutes": 2,
        "word_count": 232,
        "potentially_affected": "Apply this to the documented KiwiVision confidential-stream encryption design. Check the installed release and configuration before extending these behaviors to another Genetec deployment.",
        "dse_recommendation": "DSE recommends a certificate register linking each affected camera and Archiver to its encryption certificates, expiry dates, renewal owner, and approved private-key custody arrangements.",
        "primary_source": {
            "name": "Genetec — About confidential video stream encryption, Security Center 5.13.1.0",
            "url": "https://techdocs.genetec.com/r/Caoqovl5w0OcjLxBs_MLag/~zSK8GKNeFiH~VX6SC_nkA",
            "published_on": null,
            "authority": "Genetec"
        },
        "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/",
        "usage_info": "https://update.dsesecurity.com/usage/",
        "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.",
        "content_html": "<p>Include encryption-certificate validity in the recording continuity checks for KiwiVision confidential streams.</p>\n<h2>Source facts</h2>\n<p>Genetec’s KiwiVision guide for Security Center 5.13.1.0 states that expired certificates are no longer used for encryption. If no valid certificates remain, recording stops. The Archiver uses public certificate material to encrypt the original stream; viewing that stream requires the relevant private key on a smart card. Auxiliary Archivers record the transformed privacy-protected stream rather than the confidential original.</p>\n<p>Source: <a href=\"https://techdocs.genetec.com/r/Caoqovl5w0OcjLxBs_MLag/~zSK8GKNeFiH~VX6SC_nkA\">Genetec — About confidential video stream encryption, Security Center 5.13.1.0</a>.</p>\n<h2>Applicability</h2>\n<p>Apply this to the documented KiwiVision confidential-stream encryption design. Check the installed release and configuration before extending these behaviors to another Genetec deployment.</p>\n<h2>DSE recommendation</h2>\n<p>DSE recommends a certificate register linking each affected camera and Archiver to its encryption certificates, expiry dates, renewal owner, and approved private-key custody arrangements. Schedule renewal before the last usable certificate expires. Review the original and privacy-protected recording paths separately, because a blurred recording alone should not close a confidential-recording check. Keep renewal evidence and an escalation contact with the maintenance record. Arrange a supported recovery plan before changing certificate material.</p>\n<h2>Verification</h2>\n<p>After an approved renewal, verify new recording and authorized playback of the original stream, then verify the privacy-protected path. Record which certificate was exercised. Do not deliberately expire production certificates as a test or export private keys into routine reports.</p>\n<h2>Official reference</h2>\n<p><a href=\"https://techdocs.genetec.com/r/Caoqovl5w0OcjLxBs_MLag/~zSK8GKNeFiH~VX6SC_nkA\">Genetec — About confidential video stream encryption, Security Center 5.13.1.0</a>. Reviewed October 14, 2026.</p>",
        "content_text": "Include encryption-certificate validity in the recording continuity checks for KiwiVision confidential streams.\nSource facts\nGenetec’s KiwiVision guide for Security Center 5.13.1.0 states that expired certificates are no longer used for encryption. If no valid certificates remain, recording stops. The Archiver uses public certificate material to encrypt the original stream; viewing that stream requires the relevant private key on a smart card. Auxiliary Archivers record the transformed privacy-protected stream rather than the confidential original.\nSource: Genetec — About confidential video stream encryption, Security Center 5.13.1.0.\nApplicability\nApply this to the documented KiwiVision confidential-stream encryption design. Check the installed release and configuration before extending these behaviors to another Genetec deployment.\nDSE recommendation\nDSE recommends a certificate register linking each affected camera and Archiver to its encryption certificates, expiry dates, renewal owner, and approved private-key custody arrangements. Schedule renewal before the last usable certificate expires. Review the original and privacy-protected recording paths separately, because a blurred recording alone should not close a confidential-recording check. Keep renewal evidence and an escalation contact with the maintenance record. Arrange a supported recovery plan before changing certificate material.\nVerification\nAfter an approved renewal, verify new recording and authorized playback of the original stream, then verify the privacy-protected path. Record which certificate was exercised. Do not deliberately expire production certificates as a test or export private keys into routine reports.\nOfficial reference\nGenetec — About confidential video stream encryption, Security Center 5.13.1.0. Reviewed October 14, 2026.",
        "content_markdown": "Include encryption-certificate validity in the recording continuity checks for KiwiVision confidential streams.\n\n## Source facts\n\nGenetec’s KiwiVision guide for Security Center 5.13.1.0 states that expired certificates are no longer used for encryption. If no valid certificates remain, recording stops. The Archiver uses public certificate material to encrypt the original stream; viewing that stream requires the relevant private key on a smart card. Auxiliary Archivers record the transformed privacy-protected stream rather than the confidential original.\n\nSource: [Genetec — About confidential video stream encryption, Security Center 5.13.1.0](https://techdocs.genetec.com/r/Caoqovl5w0OcjLxBs_MLag/~zSK8GKNeFiH~VX6SC_nkA).\n\n## Applicability\n\nApply this to the documented KiwiVision confidential-stream encryption design. Check the installed release and configuration before extending these behaviors to another Genetec deployment.\n\n## DSE recommendation\n\nDSE recommends a certificate register linking each affected camera and Archiver to its encryption certificates, expiry dates, renewal owner, and approved private-key custody arrangements. Schedule renewal before the last usable certificate expires. Review the original and privacy-protected recording paths separately, because a blurred recording alone should not close a confidential-recording check. Keep renewal evidence and an escalation contact with the maintenance record. Arrange a supported recovery plan before changing certificate material.\n\n## Verification\n\nAfter an approved renewal, verify new recording and authorized playback of the original stream, then verify the privacy-protected path. Record which certificate was exercised. Do not deliberately expire production certificates as a test or export private keys into routine reports.\n\n## Official reference\n\n[Genetec — About confidential video stream encryption, Security Center 5.13.1.0](https://techdocs.genetec.com/r/Caoqovl5w0OcjLxBs_MLag/~zSK8GKNeFiH~VX6SC_nkA). Reviewed October 14, 2026."
    },
    "json_ld": {
        "@context": "https://schema.org",
        "@graph": [
            {
                "@type": "Organization",
                "@id": "https://dsesecurity.com/#organization",
                "name": "Detection Systems & Engineering",
                "alternateName": "DSE Security",
                "url": "https://dsesecurity.com/",
                "logo": {
                    "@type": "ImageObject",
                    "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20"
                }
            },
            {
                "@type": "Organization",
                "@id": "https://update.dsesecurity.com/#editorial-team",
                "name": "DSE Security Editorial Team",
                "url": "https://update.dsesecurity.com/",
                "parentOrganization": {
                    "@id": "https://dsesecurity.com/#organization"
                }
            },
            {
                "@type": "WebSite",
                "@id": "https://update.dsesecurity.com/#website",
                "name": "DSE Updates",
                "alternateName": "DSE Security Knowledge Hub",
                "url": "https://update.dsesecurity.com/",
                "inLanguage": "en-US",
                "publisher": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "potentialAction": {
                    "@type": "SearchAction",
                    "target": {
                        "@type": "EntryPoint",
                        "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}"
                    },
                    "query-input": "required name=search_term_string"
                }
            },
            {
                "@type": "WebPage",
                "@id": "https://update.dsesecurity.com/updates/kiwivision-confidential-stream-certificate-expiry/",
                "url": "https://update.dsesecurity.com/updates/kiwivision-confidential-stream-certificate-expiry/",
                "isPartOf": {
                    "@id": "https://update.dsesecurity.com/#website"
                },
                "lastReviewed": "2026-10-14"
            },
            {
                "@type": "BreadcrumbList",
                "@id": "https://update.dsesecurity.com/updates/kiwivision-confidential-stream-certificate-expiry/#breadcrumbs",
                "itemListElement": [
                    {
                        "@type": "ListItem",
                        "position": 1,
                        "name": "DSE Updates",
                        "item": "https://update.dsesecurity.com/"
                    },
                    {
                        "@type": "ListItem",
                        "position": 2,
                        "name": "Track certificate expiry for KiwiVision confidential recordings",
                        "item": "https://update.dsesecurity.com/updates/kiwivision-confidential-stream-certificate-expiry/"
                    }
                ]
            },
            {
                "@type": [
                    "Article",
                    "TechArticle"
                ],
                "@id": "https://update.dsesecurity.com/updates/kiwivision-confidential-stream-certificate-expiry/#article",
                "identifier": "https://update.dsesecurity.com/updates/kiwivision-confidential-stream-certificate-expiry/",
                "url": "https://update.dsesecurity.com/updates/kiwivision-confidential-stream-certificate-expiry/",
                "headline": "Track certificate expiry for KiwiVision confidential recordings",
                "description": "Include encryption-certificate validity in the recording continuity checks for KiwiVision confidential streams.",
                "abstract": "Include encryption-certificate validity in the recording continuity checks for KiwiVision confidential streams.",
                "articleBody": "Include encryption-certificate validity in the recording continuity checks for KiwiVision confidential streams.\nSource facts\nGenetec’s KiwiVision guide for Security Center 5.13.1.0 states that expired certificates are no longer used for encryption. If no valid certificates remain, recording stops. The Archiver uses public certificate material to encrypt the original stream; viewing that stream requires the relevant private key on a smart card. Auxiliary Archivers record the transformed privacy-protected stream rather than the confidential original.\nSource: Genetec — About confidential video stream encryption, Security Center 5.13.1.0.\nApplicability\nApply this to the documented KiwiVision confidential-stream encryption design. Check the installed release and configuration before extending these behaviors to another Genetec deployment.\nDSE recommendation\nDSE recommends a certificate register linking each affected camera and Archiver to its encryption certificates, expiry dates, renewal owner, and approved private-key custody arrangements. Schedule renewal before the last usable certificate expires. Review the original and privacy-protected recording paths separately, because a blurred recording alone should not close a confidential-recording check. Keep renewal evidence and an escalation contact with the maintenance record. Arrange a supported recovery plan before changing certificate material.\nVerification\nAfter an approved renewal, verify new recording and authorized playback of the original stream, then verify the privacy-protected path. Record which certificate was exercised. Do not deliberately expire production certificates as a test or export private keys into routine reports.\nOfficial reference\nGenetec — About confidential video stream encryption, Security Center 5.13.1.0. Reviewed October 14, 2026.",
                "datePublished": "2026-10-15T00:43:17+00:00",
                "dateModified": "2026-10-15T00:44:33+00:00",
                "mainEntityOfPage": {
                    "@id": "https://update.dsesecurity.com/updates/kiwivision-confidential-stream-certificate-expiry/"
                },
                "inLanguage": "en-US",
                "isAccessibleForFree": true,
                "author": {
                    "@type": "Organization",
                    "name": "DSE Security Editorial Team",
                    "url": "https://update.dsesecurity.com/#editorial-team"
                },
                "publisher": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "image": {
                    "@type": "ImageObject",
                    "@id": "https://update.dsesecurity.com/updates/kiwivision-confidential-stream-certificate-expiry/#primaryimage",
                    "url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-social-v2.jpg?v=1.8.20",
                    "contentUrl": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-social-v2.jpg?v=1.8.20",
                    "width": 1200,
                    "height": 630,
                    "caption": "Track certificate expiry for KiwiVision confidential recordings"
                },
                "articleSection": [
                    "Cybersecurity",
                    "Video Surveillance"
                ],
                "keywords": [
                    "Cybersecurity",
                    "Video Surveillance",
                    "Guide",
                    "Information priority"
                ],
                "genre": "Guide",
                "about": [
                    {
                        "@type": "Thing",
                        "name": "Cybersecurity",
                        "url": "https://update.dsesecurity.com/topic/cybersecurity/"
                    },
                    {
                        "@type": "Thing",
                        "name": "Video Surveillance",
                        "url": "https://update.dsesecurity.com/topic/video-surveillance/"
                    }
                ],
                "wordCount": 232,
                "timeRequired": "PT2M",
                "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/",
                "usageInfo": "https://update.dsesecurity.com/usage/",
                "copyrightHolder": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.",
                "citation": {
                    "@type": "CreativeWork",
                    "name": "Genetec — About confidential video stream encryption, Security Center 5.13.1.0",
                    "url": "https://techdocs.genetec.com/r/Caoqovl5w0OcjLxBs_MLag/~zSK8GKNeFiH~VX6SC_nkA"
                }
            }
        ]
    }
}