# Track certificate expiry for KiwiVision confidential recordings

> Include encryption-certificate validity in the recording continuity checks for KiwiVision confidential streams.

- Canonical URL: https://update.dsesecurity.com/updates/kiwivision-confidential-stream-certificate-expiry/
- Publisher: Detection Systems & Engineering (DSE Security)
- Author: DSE Security Editorial Team
- Published: 2026-10-15T00:43:17+00:00
- Modified: 2026-10-15T00:44:33+00:00
- Last reviewed by DSE: 2026-10-14
- Resource type: Guide
- DSE priority: Information
- Topics: Cybersecurity, Video Surveillance
- Reading time: 2 minutes

## What you need to know

Include encryption-certificate validity in the recording continuity checks for KiwiVision confidential streams.

## Potentially affected

Apply this to the documented KiwiVision confidential-stream encryption design. Check the installed release and configuration before extending these behaviors to another Genetec deployment.

## DSE recommendation

DSE recommends a certificate register linking each affected camera and Archiver to its encryption certificates, expiry dates, renewal owner, and approved private-key custody arrangements.

## Article

Include encryption-certificate validity in the recording continuity checks for KiwiVision confidential streams.

## Source facts

Genetec’s KiwiVision guide for Security Center 5.13.1.0 states that expired certificates are no longer used for encryption. If no valid certificates remain, recording stops. The Archiver uses public certificate material to encrypt the original stream; viewing that stream requires the relevant private key on a smart card. Auxiliary Archivers record the transformed privacy-protected stream rather than the confidential original.

Source: [Genetec — About confidential video stream encryption, Security Center 5.13.1.0](https://techdocs.genetec.com/r/Caoqovl5w0OcjLxBs_MLag/~zSK8GKNeFiH~VX6SC_nkA).

## Applicability

Apply this to the documented KiwiVision confidential-stream encryption design. Check the installed release and configuration before extending these behaviors to another Genetec deployment.

## DSE recommendation

DSE recommends a certificate register linking each affected camera and Archiver to its encryption certificates, expiry dates, renewal owner, and approved private-key custody arrangements. Schedule renewal before the last usable certificate expires. Review the original and privacy-protected recording paths separately, because a blurred recording alone should not close a confidential-recording check. Keep renewal evidence and an escalation contact with the maintenance record. Arrange a supported recovery plan before changing certificate material.

## Verification

After an approved renewal, verify new recording and authorized playback of the original stream, then verify the privacy-protected path. Record which certificate was exercised. Do not deliberately expire production certificates as a test or export private keys into routine reports.

## Official reference

[Genetec — About confidential video stream encryption, Security Center 5.13.1.0](https://techdocs.genetec.com/r/Caoqovl5w0OcjLxBs_MLag/~zSK8GKNeFiH~VX6SC_nkA). Reviewed October 14, 2026.

## Primary reference

- Name: Genetec — About confidential video stream encryption, Security Center 5.13.1.0
- Authority: Genetec
- URL: https://techdocs.genetec.com/r/Caoqovl5w0OcjLxBs_MLag/~zSK8GKNeFiH~VX6SC_nkA
- Source publication date: Not stated by the source

## Citation and use

Preferred citation: “Track certificate expiry for KiwiVision confidential recordings,” DSE Security, https://update.dsesecurity.com/updates/kiwivision-confidential-stream-certificate-expiry/
Publishing principles: https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/
Usage and citation policy: https://update.dsesecurity.com/usage/
Copyright © 2026 Detection Systems & Engineering. All rights reserved.