ONVIF Profile Q Aims To Change Discovery and Default Passwords

By: John Honovich, Published on Jan 13, 2015

ONVIF is gearing up to release a new profile, called Q.

They market it as providing "quick configuration and installation, providing innate discoverability and reliable device monitoring and event management capabilities."

However,

  • How is Profile Q different than the current Profile S?
  • What are the big changes / additions in Profile Q?
  • How will requirements in discovery and default passwords impact manufacturers and systems?

Inside, we answer these questions based on a discussion with the engineers contributing to this upcoming Profile.

Profile Q Vs Profile S and G

Profile Q is new and independent of Profile S (streaming) and G (recording). One might theoretically just support Q but we would expect most every device that supports Q to also support S.

Q is narrowly focused on the discovery, installation and monitoring. It does not address streaming, camera configuration, motion detection, PTZ, i/o, etc. All of that remains in Profile S. To that end, Profile Q is better thought of as an enhancement to Profile S.

For those who want to read the actual spec, the Profile Q Release Candidate 1.0 specification is available here. We will discuss the key elements below.

Requires ZeroConf

Today, IP camera manufacturers choose from a wide variety of ways to be discovered, with different discovery protocols and even some that set a fixed IP address. Because of that, it can be difficult to initially find different cameras and, at least, requires the VMS to implement / know how each manufacturer goes about being discovered or getting started.

Get Notified of Video Surveillance Breaking News
Get Notified of Video Surveillance Breaking News

Profile Q will now require conformant devices to support ZeroConfig, aka Zero Configuration Networking, which is best known for assigning a 169.x.x.x address if a dynamic address can not be assigned by a DHCP server.

If many manufacturers adopt Profile Q, and all thereby use the same discovery protocol, it should simplify and increase the probability of finding all IP cameras / devices on a local network. However, if manufacturers currently use a different approach, it would require them to change it to comply with Profile Q.

Requires No Default Password

Most IP cameras today have hard-coded default IP passwords, e.g., admin/admin or admin/1234, etc. (see the IP camera default password directory).

Profile Q requires eliminating this. With Profile Q, a device will not have any default password and when one first connects, in a default state, you are then required to setup a password. For those familiar with Axis, this is how they do it (see: IP Camera Passwords - Axis, Dahua, Samsung).

Since most manufacturers today have a default password, this would require them to change their fundamental password approach.

Since so many people never change passwords, ONVIF hopes that this will decrease security risks of an adversary just entering in the default password and gaining full access.

Other Profile Q Notable Requirements

The above two have the broadest potential impacts. There are a few other requirements / elements worth noting:

  • Adds basic monitoring capabilities such as processor usage, time of last reset and last reboot and last time synchronization.
  • Eliminates requirement of time synchronization which has caused connectivity issues.
  • Once the password has been set, Profile Q more tightly restricts what user levels can make changes to camera features / settings.

Impact of ONVIF Profile Q

The big two elements of Profile Q could address 2 notable pain points in using IP cameras. However, this will require manufacturers opting into Profile Q and, in doing so, changing some of their basic operations.

We expect Profile Q to be official before the end of 2015 and to take a few years for adoption to spread.

Update 2019

Profile Q has failed to garner significant support. As a point of fact, only 166 cameras currently support ONVIF Profile Q, including none from Avigilon, Axis, Dahua, Hanwha, Hikvision.

1 report cite this report:

Directory Default IP Camera Addresses on Feb 13, 2015
Initializing IP cameras can be tedious and frustrating, made worse because...
Comments (15) : Members only. Login. or Join.

Related Reports

NetApp Video Surveillance Profile on Mar 09, 2020
NetApp is increasing its efforts in video surveillance and told IPVM...
Micron 1 TB SD Cards Aim To Eliminate NVRs on Apr 08, 2020
Micron has boldly proclaimed their latest 1TB microSD "eliminates the need...
Avigilon Open Analytics Tested on Apr 16, 2020
After years of effectively closed analytics, Avigilon decided in late 2018 to...
Access Control Course Fall 2020 - Register Now - Last Chance on Sep 09, 2020
Starts next week! IPVM offers the most comprehensive access control course in...
Milestone XProtect on AWS Tested on Sep 21, 2020
Milestone finally launched multiple cloud solutions in 2020, taking a...
Genetec Security Center 5.9 Release Examined on Feb 06, 2020
Genetec released the next major version of Security Center, less than a year...
ISS Presents Face As A Credential and UVSS on Apr 30, 2020
ISS presented its security platform, including access control integration,...
Use Access Control Logs To Constrain Coronavirus on Apr 09, 2020
Access control users have included capabilities that are not commonly used...
Avigilon ACC Cloud Tested on Jul 08, 2020
Avigilon merged Blue and ACC, adding VSaaS features to its on-premise VMS,...
Seek Scan Thermal Temperature Screening System Tested on May 28, 2020
Now that IPVM has tested Dahua, Hikvision, and Sunell, we are returning to...
"Fever Camera" Online Show June 2020 - On-Demand Recordings on Jun 03, 2020
IPVM has successfully completed the world's first "Fever Camera" show....
Bosch / Milestone Forensic Search Tested on Jan 08, 2020
Bosch's Forensic Search Milestone plugin integrates Bosch IVA and EVA...
Clinton Public View Monitor (PVM) Mask Detection Tested on Jul 09, 2020
Face mask detection, or more specifically not wearing one, is expanding...
Verkada Access Control Tested on Sep 09, 2020
Verkada raised $80 million earlier in 2020, expanding from video into access...
OnTech Smart Services Partners With Google and Amazon To Compete With Integrators on Sep 25, 2020
A pain point for many homeowners to use consumer security and surveillance is...

Recent Reports

New Products Show Fall 2020 continues tomorrow with Genetec, Milestone, Avigilon, Microsoft and more! on Sep 29, 2020
IPVM's sixth online show continues tomorrow and will feature New Products...
Avigilon / Motorola VS Virtual ISC West on Sep 29, 2020
ISC West has historically been so dominant that no player would think of...
Dartmouth College Deploys K3 Temperature Screening on Sep 29, 2020
While Dartmouth College has a $6+ billion endowment, the College has bought...
Hanwha AI Object Detection Tested on Sep 28, 2020
Hanwha has added detection and classification of people, cars, clothing...
Favorite Access Control Manufacturers 2020 on Sep 28, 2020
200+ Integrators told IPVM "What is your favorite access control management...
OnTech Smart Services Partners With Google and Amazon To Compete With Integrators on Sep 25, 2020
A pain point for many homeowners to use consumer security and surveillance is...
The Future of Metalens For Video Surveillance Cameras - MIT / UMass / Immervision on Sep 25, 2020
Panoramic cameras using 'fisheye' lens have become commonplace in video...
Hikvision Sues Over Brazilian Airport Loss on Sep 24, 2020
Hikvision was excluded from a Brazilian airport project because it is owned...
China General Chamber of Commerce Calls Out US Politics on Sep 24, 2020
While US-China relations are at an all-time low, optimism about relations...
Verkada Disruptive Embedded Live Help on Sep 24, 2020
Call up your integrator? Have someone come by the next day? Verkada is...
IP Networking Course Fall 2020 - Last Chance - Register Now on Sep 23, 2020
Today is the last chance to register for the only IP networking course...
Drain Wire For Access Control Reader Tutorial on Sep 23, 2020
An easy-to-miss cabling specification plays a key role in access control, yet...
Norway Council of Ethics Finds Hikvision Human Rights Abuses "Ongoing" on Sep 23, 2020
Hikvision's involvement in "serious human rights abuse" in Xinjiang is...
IPVM Camera Calculator User Manual / Guide on Sep 23, 2020
Learn how to use the IPVM Camera Calculator (updated for Version 3.1). The...