OnGuard®

LenelS2 NVR System User Guide

LenelS2 NVR 7.8 System User Guide
This guide is item number DOC-909, revision 12.002, January 2022
©2022 Carrier. All Rights Reserved. All trademarks are the property of their respective owners.
LenelS2 is a part of Carrier.
Information in this document is subject to change without notice. No part of this document may be reproduced
or transmitted in any form or by any means, electronic or mechanical, for any purpose, without the prior
express written permission of Carrier Fire & Security Americas Corporation (“LenelS2”), which such
permission may have been granted in a separate agreement (i.e., end user license agreement or software
license agreement for the particular application).
Non-English versions of LenelS2 documents are offered as a service to our global audiences. We have
attempted to provide an accurate translation of the text, but the official text is the English text, and any
differences in the translation are not binding and have no legal effect.
The software described in this document is furnished under a separate license agreement and may only be used
in accordance with the terms of that agreement.
SAP® Crystal Reports® is the registered trademark of SAP SE or its affiliates in Germany and in several
other countries.
Integral and FlashPoint are trademarks of Integral Technologies, Inc.
Portions of this product were created using LEADTOOLS ©1991-2011, LEAD Technologies, Inc. ALL
RIGHTS RESERVED.
Active Directory, Microsoft, SQL Server, Windows, and Windows Server are either registered trademarks or
trademarks of Microsoft Corporation in the United States and/or other countries.
Oracle is a registered trademark of Oracle International Corporation.
Amazon Web Services and the "Powered by AWS" logo are trademarks of Amazon.com, Inc. or its affiliates
in the United States and/or other countries.
Other product names mentioned in this document may be trademarks or registered trademarks of their
respective owners and are hereby acknowledged.
Product Disclaimers and Warnings
THESE PRODUCTS ARE INTENDED FOR SALE TO, AND INSTALLATION BY, AN EXPERIENCED
SECURITY PROFESSIONAL. LENELS2 CANNOT PROVIDE ANY ASSURANCE THAT ANY PERSON
OR ENTITY BUYING ITS PRODUCTS, INCLUDING ANY "AUTHORIZED DEALER", IS PROPERLY
TRAINED OR EXPERIENCED TO CORRECTLY INSTALL SECURITY RELATED PRODUCTS.
LENELS2 DOES NOT REPRESENT THAT SOFTWARE, HARDWARE OR RELATED SERVICES MAY
NOT BE HACKED, COMPROMISED AND/OR CIRCUMVENTED. LENELS2 DOES NOT WARRANT
THAT SOFTWARE, HARDWARE OR RELATED SERVICES WILL WORK PROPERLY IN ALL
ENVIRONMENTS AND APPLICATIONS AND DOES NOT WARRANT ANY SOFTWARE,
HARDWARE OR RELATED SERVICES AGAINST HARMFUL ELECTROMAGNETIC
INTERFERENCE INDUCTION OR RADIATION (EMI, RFI, ETC.) EMITTED FROM EXTERNAL
SOURCES. THE ABILITY OF SOFTWARE, HARDWARE AND RELATED SERVICES TO WORK
PROPERLY DEPENDS ON A NUMBER OF PRODUCTS AND SERVICES MADE AVAILABLE BY
THIRD PARTIES OVER WHICH LENELS2 HAS NO CONTROL INCLUDING, BUT NOT LIMITED TO,
INTERNET, CELLULAR AND LANDLINE CONNECTIVITY; MOBILE DEVICE AND RELATED
OPERATING SYSTEM COMPATABILITY; OR PROPER INSTALLATION, CONFIGURATION AND
MAINTENANCE OF AUTHORIZED HARDWARE AND OTHER SOFTWARE.
LENELS2 MAY MAKE CERTAIN BIOMETRIC CAPABILITIES (E.G., FINGERPRINT, VOICE PRINT,
FACIAL RECOGNITION, ETC.), DATA RECORDING CAPABILITIES (E.G., VOICE RECORDING),
AND/OR DATA/INFORMATION RECOGNITION AND TRANSLATION CAPABILITIES AVAILABLE
IN PRODUCTS LENELS2 MANUFACTURES AND/OR RESELLS. LENELS2 DOES NOT CONTROL
THE CONDITIONS AND METHODS OF USE OF PRODUCTS IT MANUFACTURES AND/OR
RESELLS. THE END-USER AND/OR INSTALLER AND/OR RESELLER/DISTRIBUTOR ACT AS
CONTROLLER OF THE DATA RESULTING FROM USE OF THESE PRODUCTS, INCLUDING ANY
RESULTING PERSONALLY IDENTIFIABLE INFORMATION OR PRIVATE DATA, AND ARE SOLELY
RESPONSIBLE TO ENSURE THAT ANY PARTICULAR INSTALLATION AND USE OF PRODUCTS
COMPLY WITH ALL APPLICABLE PRIVACY AND OTHER LAWS, INCLUDING ANY
REQUIREMENT TO OBTAIN CONSENT. THE CAPABILITY OR USE OF ANY PRODUCTS
MANUFACTURED OR SOLD BY LENELS2 TO RECORD CONSENT SHALL NOT BE SUBSTITUTED
FOR THE CONTROLLER'S OBLIGATION TO INDEPENDENTLY DETERMINE WHETHER CONSENT
IS REQUIRED, NOR SHALL SUCH CAPABILITY OR USE SHIFT ANY OBLIGATION TO OBTAIN
ANY REQUIRED CONSENT TO LENELS2.
For more information on warranty disclaimers and product safety information, please check https://
firesecurityproducts.com/en/policy/product-warning or scan the following code:
 Table of Contents

CHAPTER 1 LenelS2 NVR System Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7

Features and Capabilities . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .7
Analytics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Backward Compatibility . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
Camera Capabilities Supported . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
De-warping of 360-Degree Cameras . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Virtual Environment Deployments . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
ONVIF Profile S . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Recording . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
PTZ Priority Control and Locking . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
Recorder Failover and Redundancy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
Video Locking . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Video Streaming with RTP/RTSP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

CHAPTER 2 Considerations and Prerequisites for Installation . . . . . . . . . . . . . . . 13

Considerations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .13
Windows Authentication Model . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Windows Updates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
Prerequisites . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .14
Identify a Data Storage Strategy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
Disk Defragmentation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Set Up Antivirus Software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Synchronize Time Across All System Components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Configure Camera IP Addresses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Configure the Network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Configure Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16

LenelS2 NVR System User Guide 5

 Table of Contents

CHAPTER 3 Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
Complete the Prerequisites . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
Install the LenelS2 NVR Software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
Unattended Installation or Upgrade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
Prerequisites for Unattended Installation or Upgrade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
Unattended Installation or Upgrade Procedure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
LenelS2 NVR System Network Setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
Run the LNVR Network Setup Tool . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
Recorder Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
Client Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
Configuring Multicast . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26
Setting Web Server Ports After Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
PTZ Control Connection and Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
PTZ Connections . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
PTZ Device Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

CHAPTER 4 Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
LenelS2 NVR Server Log Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
Issues and Actions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
DCOM Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
Uninstall LenelS2 NVR Server Software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31

APPENDIX A LenelS2 NVR Recovery Tool . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33

Recover Video Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33

APPENDIX B LenelS2 NVR System and the Use of Security Certificates . . . . . . . . 35

General Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
Types of Security Certificates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36
Self-signed Certificate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36
Custom Certificate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36
Certificate Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36
Default Self-Signed Certificate for the LenelS2 Video Web Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36
Custom Certificates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37

Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39

6 LenelS2 NVR System User Guide

CHAPTER 1 LenelS2 NVR System Overview

The LenelS2 NVR is a network video recorder system that utilizes the technology of IP addressable
cameras. System operators can access and program their cameras from anywhere in the world. IP
addressable cameras are supported by network recorders that allow data to be accessed and viewed
over a LAN or the Internet.

Features and Capabilities

Analytics
The LenelS2 NVR system is capable of automatically analyzing video to detect when certain events
occur. The full analytic suite is covered in your security management system documentation.

LenelS2 NVR System User Guide 7

 LenelS2 NVR System Overview

Motion Detection (AI)

The LenelS2 NVR system is able to detect moving objects or people within the camera’s field of
view. Motion detection can be customized to:
• Detect motion in only certain regions of the camera’s view
• Configure the movement threshold that must be met in order to generate an alarm.

Blind Camera
The LenelS2 NVR system is able to detect when the camera cannot view an area. An alarm is
generated if the camera cannot focus on the scenery within the camera’s field of view but does detect
a solid color image. This is used primarily to alert monitoring stations that a camera has been
compromised by being covered.

Brightness Change
The LenelS2 NVR system is able to detect lighting changes within the camera’s field of view. If the
lighting changes from bright to dark or vice-versa an alarm is generated.

Backward Compatibility
The LenelS2 NVR system is backward compatible with supported versions of certified security
management systems.

Camera Capabilities Supported

For a list of currently supported cameras, visit: www.LenelS2.com.
The following list of settings can generally be configured on the cameras currently supported by the
LenelS2 NVR system. However, not all cameras support all listed capabilities.

• Audio • Inputs
• Audio source type • MPEG4
• Audio volume • Multiple video inputs
• Backlight compensation • Name of camera
• Brightness • Outputs
• Camera motion detection • PTZ
• Camera Time Stamps • Quality
• Change password • Recording on camera
• Contrast • Resolution
• Digest authentication • Saturation
• Exposure • Sharpness
• Frame rates • Substreams
• Gamma • Two-way audio
• GOV length • Video standards (NTSC, PAL, etc.)
• H.264 • White Balance
• Hue

8 LenelS2 NVR System User Guide

Features and Capabilities

De-warping of 360-Degree Cameras

The LenelS2 NVR system supports client de-warping of 360-degree cameras for Axis, Interlogix, and
Panasonic cameras.

Check that the specific camera model is supported by the version of the LenelS2 NVR used. A list of
supported cameras and features for each LenelS2 NVR version can be found on the website: https://
partner.lenel.com/downloads/lnvr/software. (You will need your login to gain access to this site.)
Select Compatibility.

Note: When accessing the Downloads section at https://partner.lenel.com, make sure to select
the version of LenelS2 NVR that is currently installed.

Virtual Environment Deployments

The LenelS2 NVR system supports:
• Hyper-V as part of the virtualization solution provided by Microsoft
• vSphere as part of the virtualization solution provided by VMware

ONVIF Profile S

Note: Because the ONVIF protocol is implemented in a variety of ways, it is the camera
manufacturer's responsibility to follow the specifications. We do not guarantee that all
cameras work with the LenelS2 NVR system’s ONVIF implementation because we
cannot ensure that a camera feature is implemented according to the ONVIF
specifications.
The LenelS2 NVR system supports the following ONVIF Profile S features if they are supported by
the camera:
• Camera detection (identifies the capabilities of cameras)
• Configuration of:
- Codec (MJPEG, MPEG4, H264)
- Resolution
- Bit rate, compression
- Sensor information such as brightness and contrast, if supported by the camera
- Camera motion detection
- Sub-streams
- Real-time Transport Protocol (RTP) selection of RTP over UDP, TCP, HTTP, and Multicast
• Control of:
- Pan/tilt/zoom (absolute, relative, continuous)

LenelS2 NVR System User Guide 9

 LenelS2 NVR System Overview

Recording
The primary function of the LenelS2 NVR system is to record video and audio so that it can be played
back at a later time. There are several configurable parameters that control how video is recorded.
These parameters affect both the quality of the recording and the amount of storage space the
recordings consume. In general, the better the quality of the recording desired, the more storage space
is required to maintain it, but the LenelS2 NVR system supports multiple recording modes that help
with this trade-off. The first, Normal Mode, should be applied to the most common recording
scenario. The second, Event Mode, should be applied to event scenarios, such as when motion is
detected or an access event occurs.

Both Normal and Event Mode recording may be scheduled so that they are in effect only during
certain times of the day or certain days of the year.

Normal Mode. For Normal Mode recording when using MJPEG encoding, the LenelS2 NVR system
allows you to select frame rates less than or equal to the designated live frame rate, in addition to
time-lapse frame rates up to 1 hour per frame.

For Normal Mode recording when using MPEG4 or H.264 encoding, the LenelS2 NVR system
allows you to select a frame rate equal to the designated live frame rate, a time-lapse frame rate, or a
"Key Frame Only" rate that results in the recording of only the I-frames received from the camera.

Event Mode. The LenelS2 NVR system supports Event Mode recording. Event Mode recording
allows recordings to be made at a higher frame rate when an event is generated, thus providing a
solution to the quality/space trade-off. Through the Pre-Roll and Post-Roll configuration, that higher
frame rate can be applied to recordings made up to 15 minutes before and several minutes after the
event occurrence. After the Post-Roll period, recording resumes using the Normal Mode frame rate.

For Event Mode recording when using MJPEG encoding, the LenelS2 NVR system allows you to
select frame rates less than or equal to the designated live frame rate.

For Event Mode recording when using MPEG4 or H.264 encoding, the LenelS2 NVR system allows
you to select a frame rate equal to the designated live frame rate or a "Key Frame Only" rate.

PTZ Priority Control and Locking

PTZ usage can be prioritized by the user levels configured in the security management system
software. Customized in the security management system software, users can be given different PTZ
priority levels, which allows a user with a higher priority to lock or take control of the PTZ
functionality from someone with a lower priority level.

Recorder Failover and Redundancy

Secondary recorders record and process video when the primary recorder is offline or at the same
time if the redundancy feature is configured.

In standard failover, when the primary recorder goes offline, an alarm is generated and the secondary
recorder begins recording video. Users can view live and recorded video from the time the alarm was
generated on the secondary recorder. The secondary recorder uses the same workstation, algorithms
and channel parameters as the primary recorder. When the primary recorder comes back online, a
restored alarm is generated, the primary recorder connects to the IP camera and resumes recording.
When both the recorders are online, users can view uninterrupted recorded video.

10 LenelS2 NVR System User Guide

Features and Capabilities

A redundant failover system may be configured via your security management system software. If a
redundant failover system is used then only alarms for the primary recorder will be displayed if both
are online.

The redundancy feature is a full-time failover solution. In a failover configuration, video channels are
recorded to the primary recorder unless it goes offline, at which time recording occurs on the
secondary recorder. In a redundant configuration, video channels are recorded to both the primary and
secondary recorders regardless of the status of the primary recorder.

Full configuration of a redundant failover is done by the security management system software.

IMPORTANT: UDP port 5000 must be used when configuring failover.

Video Locking
The security management system software can be configured to have the LenelS2 NVR server lock
video files associated with events so they are not deleted. The LenelS2 NVR server regularly deletes
older files to free disk space but if the event is locked they will not be deleted. Events can be locked
automatically by the security management system software or locked manually by the user.

Video Streaming with RTP/RTSP

During the LenelS2 Network Video Suite installation you can also install:
• Streaming Video Server - Allows the LenelS2 NVR system to stream video from the recorder
to a video viewing application using RTP/RTSP protocol. This server must be installed if LenelS2
NVR video will be viewed in Magic Monitor.
• Streaming Video Client - A client application that allows you to configure the ports, channels,
and settings of the streaming video server.

LenelS2 NVR System User Guide 11

 LenelS2 NVR System Overview

12 LenelS2 NVR System User Guide

CHAPTER 2 Considerations and
Prerequisites for Installation

Considerations

Windows Authentication Model

The process used by Windows to verify a client’s identity is called authentication. In order to properly
set up a system or troubleshoot an existing installation, the first step is to determine the identity of the
client attempting to connect to the server.

Here are some general guidelines:

• Interactive applications always run with the identity of the user who launched them, or they can be
launched with credentials of a different user through the “runas” command.
• Services typically run under the SYSTEM account (or another account specified through
Windows Services MMC).

When a client connects to a remote server, the client’s identity is sent to that machine, and that system
authenticates the client. This process can have several outcomes depending on which user account is
used by the client:
• If both machines are in a domain and the domain user is used, then the server will use the domain
controller to authenticate the incoming client connection.
• If the client used the local machine account and the same local account with the same password
exists on the server, then that account will be used.

Note: If the same local account exists on the server, but the password is different, the client’s
connection attempt will immediately return failure. It will not default to the method
described next.
• If the client used the local machine account and an account with that name is unknown to the
server, an incoming connection will be assigned the ANONYMOUS user on the remote machine.

Note: There is a security policy which allows ANONYMOUS users to be part of the Everyone
group, but by default the Everyone group only includes users whose identity was
established in some way (i.e., not anonymous).

LenelS2 NVR System User Guide 13

 Considerations and Prerequisites for Installation

Local vs. Remote Permissions

Extended Windows security model, introduced in Windows XP SP2 and Windows 2003 Server SP1,
split up permissions listed in the previous section into two separate parts: local and remote. This
allows system administrators more granular control over object security.

As the client-server connection is analyzed, the location of the components will determine which
permissions (launch, activation, and access) will be used. If both components are physically running
on the same machine, local permissions will be used, otherwise, Windows will use remote
permissions.

Windows Updates
When running Windows updates, be aware that they require a full shut down of your computer. Make
sure that these updates are scheduled to run when either recording will not be necessary or when
backup or fail over systems are properly configured and running.

It is recommended that the Security Utility is run after updates. (Click the Start button, then select All
Programs > LenelS2 Network Video Suite > Security Utility.)

Disc Reclamation
If the LenelS2 NVR system runs out of hard drive space, the oldest video files are deleted regardless
of any specific camera’s storage capacity configuration. Consider a case where the retention policy is
set to 5 days for all channels, except for 1 channel which is configured for a 30-day retention policy.
The reclamation logic will delete files for the channel with 30 day retention that are 6-30 days old
before deleting files from any other channel. This significantly affects the amount of video that is
stored for the 30 day retention channel.

Prerequisites
Administrator rights are required to install the LenelS2 NVR system software.

Identify a Data Storage Strategy

In accordance with Microsoft’s drive guidelines, a certain amount of disk space must be reserved. For
any storage drive identified for use by a LenelS2 NVR server, at least ten percent (10%) of the total
storage capacity must remain as free space for the LenelS2 NVR server to function correctly.

Determine the following:

• Drive storage requirements
• Is the drive capacity sufficient for the storage requirements plus at least ten percent (10%)?
• Drive accessibility

14 LenelS2 NVR System User Guide

Prerequisites

Disk Defragmentation

Under normal operating conditions, disk defragmentation should not be necessary on the storage
drives of the LenelS2 NVR. If it is necessary, note that the use of disk operations such as
defragmentation can affect the performance of the recording process during operation. Therefore, it is
strongly recommended that you first stop the LNVR Services (select All Programs > LenelS2
Network Video Suite > Stop LNVR Services) before running disk defragmentation. When disk
defragmentation is complete restart the services (All Programs > LenelS2 Network Video Suite >
Start LNVR Services).

Set Up Antivirus Software

If this type of software is required (due to corporate policy, for instance), then you must adhere to the
following guidelines.

For real-time protection, exclude the following:

• All files with the extensions .LVI, .LEI, and .LNR
• Data drives
• LenelS2 NVR system file folder (use %allusersprofile%/lenel/lnvsuite)

Synchronize Time Across All System Components

IMPORTANT: Time must be synchronized on all components (LenelS2 NVR servers and
clients; cameras; and other related devices) for the LenelS2 NVR system to
work properly.

Third-party tools are available to synchronize times across multiple time zones.

Configure Camera IP Addresses

All IP cameras must have their IP address configured according to their respective user guide(s). The
IP address also must be entered when configuring the camera in the security management system
software.

Configure the Network

For correct function of the LenelS2 NVR system, configure the computers, network drives, Windows
firewall, and Windows permissions as described in this section.

Computers and Network Drives

All computers on the LenelS2 NVR system network need to be on the same domain or trusted
domain. If they are not, the recorder will not function properly.

If you are using network drives, it is recommended that a user account be created to access those
network drives.

LenelS2 NVR System User Guide 15

 Considerations and Prerequisites for Installation

Windows Firewall

Note: If the firewall is enabled during installation of the LenelS2 NVR security management
system software, the exception list will automatically be populated.

On the General tab of the Windows Firewall dialog, verify that the Don’t Allow Exceptions check
box is not selected.

Add the following to the exception list:

• LenelS2 NVR system services:
- LnrCapSvc
- LnrRetrSvc
- LnrRTPServer
- LpsSearchSvc
• (For installations using Remote Desktop Protocol) RDP
• RPC Port (TCP/IP 135)
• RTP Port (TCP/IP 554)
• UDP Port (5000)

Set the following for ICMP (Internet Control Message Protocol):

• Allow incoming echo requests

Configure Security

Security Policies

In order to facilitate equipment installation and be adaptable to existing corporate security policies,
LenelS2 NVR system video servers are shipped and/or configured by default with no security
policies. Once a system is going into production, it is recommended that security on these servers be
locked down by your system administrator so that only users with valid Windows domain accounts
have access to video.

Through browser-based applications, the ability to access video servers is made much easier and
therefore, using Windows domain authentication to deny access to these servers is highly
recommended and necessary for a secure deployment.

Limit Access to the Users Group

By default, the LenelS2 NVR system is installed with access granted to all clients. Access includes
retrieval of video and the ability to modify the recorder configuration. Access can be limited by
running the LenelS2 Video Suite Configuration tool (click the Start button, then select All
Programs > LenelS2 Network Video Suite > LenelS2 Network Video Admin tool), navigating to
LnrSetup, and selecting the Security tab.

Review DCOM Security Settings

Default machine-wide limits should be adjusted to provide adequate security for the Windows
installation. Each product in the Video Suite has different DCOM (Distributed Component Object
Model) configurations based on the included components.

16 LenelS2 NVR System User Guide

Prerequisites

If access to the LenelS2 NVR server is limited to the LNRUsers group, then ANONYMOUS user and
Everyone group entries do not have to be given access. Removing these entries from access
permission limits and launch/activation limits will improve security. The LNRUsers group must be
allowed to access and activate DCOM objects, but not launch them.
If access to the LenelS2 NVR server is not limited to the LNRUsers group, anonymous user access
can still be disabled. With this setting, only users that the system knows about will be able to
authenticate. This could be problematic for installations that do not have a domain server. Therefore
the recommendation is that if the LenelS2 NVR server is secured with this method, then the
LenelS2 NVR server and all client machines should be part of a domain.

Security Certificates for the LenelS2 NVR

When the LenelS2 NVR system is installed, a self-signed certificate is automatically installed to
enable video viewing in OnGuard applications.

For installations where IT policies prevent self-signed SSL certificate usage, a custom certificate is
required. Obtain a custom certificate from a trusted Certificate Authority. Follow the instructions
provided by the trusted Certificate Authority to generate a Certificate Signing Request (CSR). You
can use whichever Certificate Authority you prefer.

For more information, refer to LenelS2 NVR System and the Use of Security Certificates on page 35.

LenelS2 NVR System User Guide 17

 Considerations and Prerequisites for Installation

18 LenelS2 NVR System User Guide

CHAPTER 3 Installation

Complete the Prerequisites

Prior to installing the LenelS2 NVR system, complete the prerequisites identified in the previous
chapter.

Note: Multiple network cards may be installed in the LenelS2 NVR computer. When using a
second network card to connect to a network independent from that of the host system,
the second network must have a different subnet. If not, then the LNVR Network
Setup tool, which is included when the LenelS2 NVR system is installed, must be used.
(Click the Start button, then select All Programs > LenelS2 Network Video Suite >
LNVR Network Setup.)

Install the LenelS2 NVR Software

IMPORTANT: You must be logged in as an Administrator to properly configure the LenelS2
NVR System.

IMPORTANT: User Access Control should be set to “never notify” or unchecked depending
on the operating system being used.
1. Install DirectX (can be downloaded from www.microsoft.com).
2. On the Supplemental Materials media, navigate to the Digital Video\LenelS2 Network Video
Suite 7.x.xxx directory, and run the setup.exe program.
3. The LenelS2 Video Suite Installation - InstallShield Wizard is displayed with a list of third-
party prerequisites for installation.
Click [Install].
4. After the third-party prerequisites are installed, the Welcome to the InstallShield Wizard for
LenelS2 Video Suite Installation dialog is displayed.
Click [Next].

LenelS2 NVR System User Guide 19

 Installation

5. Read the license agreement. If you agree, select the “I accept the terms in the license agreement”
radio button.
Click [Next].
6. The Custom Setup dialog is displayed. Icons indicate how a feature will be installed. Click an
icon to view icon descriptions.
a. Select LenelS2 Network Video Recorder for installation on the hard drive.
b. If your installation will require Hybrid Analog Card Installation, expand LenelS2 Network
Video Recorder and enable the option.
c. Click [Next].
7. The Destination Folder dialog is displayed with the destination folders for the LenelS2 Video
Suite Installation components and the configuration settings with the option to change them.
Click [Next].
8. If you enabled the installation of LenelS2 Video Web Services above, the Web Server Options
dialog is displayed. Select the protocols and ports for the LenelS2 Video Web Services to use.
9. Open the selected ports in the Firewall.

Note: If LenelS2 Video Web Services is selected, an SSL certificate that enables SSL (Secure
Sockets Layer) communication between the client and server is installed. If, after
successful installation of the LenelS2 Video Web Services, the server's name or domain
changes, the SSL certificate must be reinstalled. To reinstall the SSL certificate, click
the Start button, then select All Programs > LenelS2 Video Web Services > SSL
Certificate Installer.
If you must change the web server port numbers after installing the LenelS2 Video Web
Services, refer to Setting Web Server Ports After Installation on page 27.
10. Click [Next].
11. To begin the LenelS2 Video Suite program installation, click [Install].

IMPORTANT: If you are installing the LenelS2 Video Suite program using RDP (Remote
Desktop Protocol), you should have created an exception in the Windows
Firewall settings as part of the prerequisites. You must create this exception
prior to turning the firewall on. Failure to do so will render the recorder
unreachable via RDP.
12. The LenelS2 Video Suite Configuration - LNVR Storage dialog is displayed. This dialog is
used to configure the location of data for the network recorder.
a. Under Available Locations, all local hard drives and mapped network drives are listed.
Select a drive and click the arrow key to move the selection to the other column (Selected
Locations).

Note: Mapped drives appear in the Available Locations list, but will not function properly
and should not be used.
To specify a UNC path name, click <User Location...>. Type a path or browse for the
location. The following are supported:
• iSCSI: Internet SCSI (Small Computer System Interface), an IP-based storage
networking standard for linking data storage facilities. Because of the ubiquity of IP
networks, iSCSI can be used to transmit data over local area networks (LANs), wide
area networks (WANs), or the Internet and can enable location-independent data storage
and retrieval.

20 LenelS2 NVR System User Guide

Install the LenelS2 NVR Software

• SAN: (Storage Area Network). A high-speed special-purpose network (or subnetwork)

that interconnects different kinds of data storage devices with associated data servers on
behalf of a larger network of users.
• NAS: (Network-Attached Storage). A hard disk storage that is set up with its own
network address rather than being attached to the department computer that is serving
applications to a network's workstation users.

IMPORTANT: When recording to NAS, keep in mind that failures may occur due to lack of
bandwidth or poor hard drive performance (for example, if several
LenelS2 NVR servers are writing to the same drive location or same shared
folder).
Each recorder requires its own dedicated space for storage.
b. To store index and video files separate on dedicated drives, check the box for Separate
index and video files.
An Index column appears in Selected Locations. Check the box beside the location to store
the index.
c. Specify the name of the folder where the data is to be stored. If the folder does not already
exist, it will be created.
d. For any storage drive identified for use as a LenelS2 NVR server, at least ten percent (10%)
of the total storage capacity must remain as free space for the LenelS2 NVR server to
function correctly. In the Leave Free Space text field, enter the percentage of overall disk
capacity to be retained as free space. The percentage is then uniformly applied to all installed
drives.
To specify free space in megabytes (MB), check the box for Specify MB instead of percent.

Note: For software versions prior to LenelS2 7.1 SP1, free space was designated in terms of
MB. If the LenelS2 7.1 SP1 software is installed as an upgrade, then the LenelS2 NVR
server will retain the MB value unless the box to Switch to Percent Usage is checked.
When this box is checked, a value between 10% and 80% can be entered.
e. Click [Next].
13. The Security dialog is used to define accessibility for the network recorder.

IMPORTANT: It is recommended that only users with knowledge of Windows networking

and security configure this step.
a. Select whether to use anonymous DCOM connections or limit access to members of the
LNVUsers group.
If the box for Limit access to members of “LNVUsers” group is checked, click [Add
User] to add a user to the group. Type a username and password and click [OK]. This is the
username and password to use when adding the LenelS2 NVR server to OnGuard or Prism.

Note: The LNVUser password cannot contain special characters.

b. Click [Next].
14. The Identity dialog is used to specify the account under which the LenelS2 NVR services are run.
By default, Run as System account is selected.
If you are using network drives for storage, select Run as the following account, then specify
the user name and password required to access those machines. Confirm the password and click
[Finish].

LenelS2 NVR System User Guide 21

 Installation

15. After the installation is complete, the Security Utility runs automatically.
a. Read the Security Utility Disclaimer Notice and if you agree, click [Agree].
b. Respond to Security Utility prompts as needed.
c. Click [Apply] to apply the security changes to the system with the firewall on.
d. Click [Close] to close the Security Utility.
16. A reboot is required. Click [OK] to restart the computer.

To change these settings after installation, use the LenelS2 Network Video Admin Tool (click the
Start button, then select All Programs > LenelS2 Network Video Suite > LenelS2 Network Video
Admin Tool).

Unattended Installation or Upgrade

LNV Suite is a Windows Installer-based setup package capable of running installations in reduced
user interface modes to support various industry standard deployment technologies, such as SMS or
Active Directory. This section provides specific requirements for deploying the LNV Suite via
unattended or silent methods.

Prerequisites for Unattended Installation or Upgrade

Install Third-party Applications

Several third-party applications are installed during the standard user-driven installation. These
applications must be installed prior to the unattended installation or unattended upgrade of a LenelS2
NVR system.

The third-party applications are included on the LNV Suite media and deployed individually using
your preferred unattended technology. Alternately, they may be included in a slipstream image of a
Windows installation.

IMPORTANT: Install the prerequisites in the order given in the following table:

Third-party
Applications to Recommended
Install LNV Suite Media Location Options

1 Microsoft Visual C++ ISSetupPrerequisites\{72AAD3AB-420C-41F0- /q

2017 Runtime 9BE5-D854C4037DEF}\vc_redist.x86.exe
Redistributable

2 Microsoft .NET 4.6.1 ISSetupPrerequisites\{B1C982A7-100D-4691- /v/q /norestart

Framework 9DCF-F5986F404DD8}\NDP461-KB3102436-
x86-x64-AllOS-ENU.exe

3 LenelS2 AppContext ISSetupPrerequisites\{66F56776-50FE-4316- /qn

Common Component 860D-01D6CAEC1483}\setup.exe
10.4

22 LenelS2 NVR System User Guide

Unattended Installation or Upgrade

Customize the Configuration File

For unattended installations and upgrades, configuration settings read from a configuration file and
sent to the installer as part of the command that begins the installation. The configuration file must be
formatted as a standard Windows XML file. The sample file is located in the Unattended Installation
folder on the LNV Suite media.

IMPORTANT: The configuration file you provide needs to contain the recorder's full
configuration, even if you are upgrading an existing installation.

The configuration file contains settings that must be customized prior to launching the LNV Suite
installation or upgrade in unattended mode. Store the customized file on a disc or network location
where it can accessed during the unattended installation or upgrade.

Example of the XML-formatted configuration file:

LenelS2 NVR System User Guide 23

 Installation

To restrict access to the LenelS2 NVR system to specific users, update the following in the Sample
LNR Install Config.xml file:

<ServerAccess useAnonymousDCOM="false" restricted="true" deleteExisting="true">

<LnvUser username="SomeUser01" password="SomePassword01!!"/>
<LnvUser username="SomeUser02" password="SomePassword02!!"/>
<!-- Add as many as are required; be sure to include both username and password -->
</ServerAccess>

Considerations for updating server access using the configuration file:

• LNVUser password cannot contain special characters.
• A Windows user is created for each new 'LnvUser username' specified and added to the
LNVUsers user group.
• Existing LenelS2 NVR system users that are not specified in the Sample LNR Install Config.xml
file are deleted.
• The setting deleteExisting="false" retains existing users without changes (if a new password is
specified for an existing user, it is not updated).

Unattended Installation or Upgrade Procedure

For an unattended installation or upgrade, follow these steps for each LenelS2 NVR server in your
system:
1. Complete the prerequisites:
a. Install third-party applications (refer to “Install Third-party Applications” on page 22).
b. Modify the Sample LNR Install Config.xml file for the required configuration (refer to
“Customize the Configuration File” on page 23).
2. Copy the Unattended Installation folder from the LNV Suite media to a location that can be
accessed by the machine and rename the file without the word "sample.”
3. Run the command line setup.exe file with appropriate flags.

Command-line Syntax
To launch the LNV Suite installer in unattended mode, use the following command-line syntax:
setup.exe /s /v"/qr REBOOTPROMPT=Suppress REBOOT=Force
ADDLOCAL=LNVR,LVWebServices,SVServer UNATTEND=1 HTTPPORT=\"80\"
SECUREPORT=\"443\"
ADMINCONFIGFILE=\"\\MyNetworkServer\Configurations\Sample
LNRInstall Config.xml""

To install all LenelS2 NVR system features:

setup.exe /s /v"/qr REBOOTPROMPT=Suppress REBOOT=Force

ADDLOCAL=LNVR,LVWebServices,SVServer,SVClient UNATTEND=1
HTTPPORT=\"80\" SECUREPORT=\"443\"
ADMINCONFIGFILE=\"\\MyNetworkServer\Configurations\Sample
LNRInstall Config.xml""
When the installation is complete, the LenelS2 NVR server automatically reboots.

24 LenelS2 NVR System User Guide

LenelS2 NVR System Network Setup

LenelS2 NVR System Network Setup

The LNVR Network Setup is a tool that is installed with the LenelS2 Network Video Suite and
client software. It can be used to configure a variety of network options, including port usage and
multicast. This tool may be run on both the recorder and any LenelS2 NVR video client, such as
OnGuard. The applicability of the options presented by this tool varies depending on whether it is
being run on the recorder or a client.

Run the LNVR Network Setup Tool

Run the LNVR Network Setup tool as follows:

• On a recorder
Click the Start button, then select All Programs > LenelS2 Network Video Suite > LNVR
Network Setup
• On a client
Double-click LnrNI.exe from the directory: C:\Program Files (x86)\Common Files\Lenel
Shared\LNVSuite Client Components\7.x

Recorder Options
1. Run the LNVR Network Setup tool.
2. Click the Recorder Network Settings tab and select the desired network ports the recorder will
use for streaming video, or accept the defaults.
• Recorder TCP/IP Port
• RTP Server Port
3. Select the option for the First Recorder Multicast Port for multicast streaming.

Note: To use multicast for streaming video, additional network set up is required. For more
information, refer to Configuring Multicast on page 26.
4. Use the RTP Client Settings tab to limit the range of network ports the recorder will use to
retrieve video from RTP-enabled IP cameras.

Client Options
1. Run the LNVR Network Setup tool.
2. Select the network interface through which the client should receive video from the recorder.
Client systems often contain more than one network interface. If you would like the client to
receive video using the UDP/IP, it important to identify the specific network interface to use,
otherwise the recorder will revert to the less efficient TCP/IP protocol for delivering video.
3. Click the Client Network Settings tab to select the protocols for the client to use for streaming
video from the recorder. The recorder will attempt to use the selected protocols in the order
listed.
• Use Multicast
Select Use Multicast to use the multicast option for receiving video from the recorder.

Note: To use multicast for streaming video, additional network set up is required. For more
information, refer to Configuring Multicast on page 26.

LenelS2 NVR System User Guide 25

 Installation

• UDP/IP
Select Use UDP/IP to use unicast (UDP) for streaming video. If you choose to use this
option, you may also limit the network port range to use.

Note: Due to the complexities involved in configuring multicast, it is recommended that you
always select the UDP/IP option as a backup in case your router settings or IT policies
change in a way that prevents multicast from working properly.
• TCP/IP
The Use TCP/IP option cannot be deselected. If the recorder is unable to deliver video via
multicast or unicast, the recorder will revert to using TCP/IP automatically.
4. Use the Remote Monitor Network Settings tab to limit the network port range used by Remote
Monitor.
5. Use the RTP Client Settings tab to limit the range of network ports the client will use to retrieve
video from RTP-enabled IP cameras when using direct camera connection.

Configuring Multicast

The multicast option of delivering live video to client systems is the most efficient method, but it
comes with complexities that are not present with UDP/IP and TCP/IP options. To successfully use
multicast with the LenelS2 NVR system, configure the recorder, every client, and the network router
using the steps that follows.

Configure the Recorder

1. Run the LNVR Network Setup tool. See Run the LNVR Network Setup Tool on page 25.
2. Select the Client Network Settings tab.
3. Place a check in the Use Multicast checkbox.
4. Select the Recorder Network Settings tab.
5. Accept the default Any Available option for First Recorder Multicast Port or indicate a specific
network port.
6. Click [Apply].

Configure Every Client

1. Run the LNVR Network Setup tool. See Run the LNVR Network Setup Tool on page 25.
2. If the client system has more than one network interface, select the one that should receive the
multicast video stream.
3. Select the Client Network Settings tab.
4. Place a check in the User Multicast checkbox.
5. Click [Apply].
6. Repeat step 1 through step 5 for every client.

Configure the Network Router

Refer to the manufacturer user guide to enable IP Multicast. This may require a firmware upgrade.

Note: Some network devices (routers/switches) may broadcast the video streams to all devices
instead of delivering data only to subscribed clients. Also, slow (10 Mbps) devices may
not be able to handle the high-bandwidth traffic that results from a multicast video
stream. A 100 Mbps or higher device is recommended.

26 LenelS2 NVR System User Guide

Setting Web Server Ports After Installation

Firewall Considerations

By default, firewalls typically block both UDP/IP and IP Multicast traffic between the LenelS2 NVR
server and its clients. This traffic is one-directional communication, so firewalls must be configured
to allow network access from the LenelS2 NVR server to the clients. If your firewall cannot be
configured to enable UDP/IP traffic on all ports, then specify a range of ports to be opened following
the instructions above. The number of live video streams on the client is limited by the number of
open ports.

Setting Web Server Ports After Installation

1. Click the Start button, then select All Programs > LenelS2 Video Web Services.
2. Select Web Services Administration. The Web Services Administration screen is displayed.

Note: Recorder credentials (username and password) are not applicable for the LenelS2 NVR.
3. Configure Web Server ports as follows:
a. For non-secure communication between client and server, check the Enable HTTP box and
enter an available port number. Default is 80.
b. For secure (encrypted) communication between client and server, check the Enable SSL
box and enter an available port number. Default is 443.
c. Check the check box to allow unauthorized FCGI connections for HTTP.
d. Click [OK].
4. Open the selected ports in the firewall.
5. For changes to take effect, restart the LenelS2 Video Web Services services.
Click the Start button, then select All Programs > LenelS2 Video Web Services > Stop Web
Services and then Start Web Services.

PTZ Control Connection and Configuration

Refer to your specific camera user guide to see its specific PTZ Control capabilities. To see specific
camera capabilities, please refer to www.lenelS2.com.

PTZ Connections
PTZ devices without a built-in IP device require a serial connection to an IP camera or video server
(via RS-232, RS-485, or RS-422 standard). For more information, refer to the manufacturer’s
documentation.

PTZ Device Configuration

PTZ devices with built-in IP cameras do not require special configuration. For all other cases, use the
IP device’s web interface to configure the appropriate settings for the driver and COM port (baud rate,
data bits, stop bits, parity bits).

LenelS2 NVR System User Guide 27

 Installation

28 LenelS2 NVR System User Guide

CHAPTER 4 Troubleshooting

LenelS2 NVR Server Log Files

LenelS2 NVR server log files are always stored at the following location (not user configurable):
X:\ProgramData\Lenel\LNVSuite\7.n\logs
where “X:\” equals the drive letter assigned to the drive where the LenelS2 NVR server
log files are stored and “n” is the latest minor version number.

Issues and Actions

Potential issues and the actions for their resolution are listed in the table that follows.

Issue Action

Firewall blocks access Configure the firewall not to block access to the LenelS2 NVR
server and all of the LenelS2 Video Web Services.

LenelS2 Video Web Services Check for the following issues and follow the action in this table:
are not working properly. • Firewall blocks access
• Port conflicts

LenelS2 NVR System User Guide 29

 Troubleshooting

Issue Action

Port conflicts Use Web Services Administration to change ports configured

for the LenelS2 Video Web Services after installation.
If IIS was already installed on the server when the LenelS2 NVR
server software was installed, confirm that no port conflicts exist
between IIS and the LenelS2 Video Web Services. If there is a
port conflict, do one of the following:
• Disable IIS
• Reconfigure IIS to use a unique set of ports that do not
conflict with the ports used by the LenelS2 Video Web
Services
• Reconfigure the LenelS2 Video Web Services to use a
unique set of ports that do not conflict with IIS
For any of the above, open the selected ports in the firewall.

Video is not accessible Contact Technical Support to assist with configuration and data
recovery.

DCOM Configuration
The DCOM settings must be the same on all computers connected to the LenelS2 NVR system. Be
sure to close all security management system applications that may be connected to the recorder.
1. From the Windows Start menu, select Run.
2. Type dcomcnfg and click [OK].
3. Access the Distributed COM Configuration Properties by navigating to Component Services >
Computers > My Computer.
4. Right-click My Computer and select Properties.
5. On the Default Properties tab, make sure it is configured as follows:
• Select the Enable Distributed COM on this computer check box.
• Clear the Enable COM Internet Services on this computer check box.
• Default Impersonation Level should be set to Impersonate.
• Clear the Provide additional security for reference tracking check box.
6. On the Default Protocols tab, use the buttons to order the list in the exact order shown below:
• Connection-oriented TCP/IP
• Datagram UDP/IP
• Tunneling TCP/IP
• Connection-oriented SPX
7. Verify that no port ranges are specified for any of the following protocols:
• Connection-oriented TCP/IP
• Datagram UDP/IP
• Tunneling TCP/IP
8. Click [OK].
9. If changes were made, restart the recorder.

30 LenelS2 NVR System User Guide

Uninstall LenelS2 NVR Server Software

10. Verify that the object exporter error does not appear. If the error still occurs, repeat this
procedure, but in step 6, remove the Tunneling TCP/IP protocol from the list of default protocols.

Uninstall LenelS2 NVR Server Software

1. From the Windows Start menu, select Control Panel > Programs > Uninstall a program.
2. Select LenelS2 Video Suite Installation from the list and uninstall it.
3. Reboot the computer.

LenelS2 NVR System User Guide 31

 Troubleshooting

32 LenelS2 NVR System User Guide

APPENDIX A LenelS2 NVR Recovery Tool

IMPORTANT: Only use the LenelS2 NVR Recovery Tool with the assistance of the Technical
Support Group.

The LenelS2 NVR Recovery Tool is used to restore system information that may have been lost as a
result of upgrading from an earlier version of the LenelS2 NVR server, or from removing storage
locations containing LenelS2 NVR server files. Without this system information, the video will not be
viewable on a Prism client until the Recovery Tool is run.The video will still be viewable on an
OnGuard client.

The Recovery Tool can be run while the LenelS2 NVR server is either recording or not recording. If
the LenelS2 NVR server is still recording while the Recovery Tool is run, older video will not be
accessible to Prism and the Recovery Tool will take longer to finish than if the LenelS2 NVR server is
not recording.

Recover Video Files

IMPORTANT: Running the LenelS2 NVR Recovery Tool will cause services to stop and
restart, which will cause video monitoring to stop for several minutes.

IMPORTANT: The LenelS2 NVR Recovery Tool must be run on each LenelS2 NVR server
where video will be viewed on Prism.

IMPORTANT: If any channels are configured for failover, the Recovery Tool must be installed
and run on both the primary and failover recorders.

IMPORTANT: If the LenelS2 NVR server is heavily utilized, the Recovery Tool may take a
long time to execute.
1. Click the Start button, then select All Programs > LenelS2 Network Video Suite > Recovery
Tool.
2. The Recovery Tool automatically detects the recorder. Click [Start].

LenelS2 NVR System User Guide 33

 LenelS2 NVR Recovery Tool

3. The Recovery Tool processes the recorded videos on the LenelS2 NVR server. If the LenelS2
NVR services are running, the tool asks if it is okay to automatically stop and start the services as
needed. Click [Yes] to continue the recovery process. The more video that needs to be recovered
the longer the tool will take to run.
4. Optionally, you can schedule the specific days and time range during which the Recovery Tool
will restart the LenelS2 NVR server.

34 LenelS2 NVR System User Guide

APPENDIX B LenelS2 NVR System and the Use of
Security Certificates

To display video in OnGuard Monitor, security certificates need to be obtained for the recorder(s).
This appendix contains setup and configuration information for security certificates on the recorder.
For OnGuard servers, refer to the appendix in the OnGuard Installation Guide.

General Description
Transport Layer Security (TLS) certificates, also known as Secure Socket Layer (SSL) certificates,
are installed on web servers and clients to create a secure encrypted connection between the server
and the client. The private certificate is installed on the server, and the public certificate is sent to the
client when the secure connection is initiated. The client uses the public certificate to verify the
server’s identity.
TLS is used either directly or indirectly by the LenelS2 Video Web Services. TLS is enforced by the
NGINX web server running on the recorder.
Certificates are bound to the specific domain and server on which they are installed. If, following the
installation of a certificate, the server’s name is changed or the server is connected to a new domain,
the certificate will need to be regenerated and installed.
Certificates have expiration dates. You must renew your certificates before they expire. If you allow
your certificates to expire, data exchanged between your server and your clients will not be secure,
and in some cases will fail. Web application users might lose access to the application or receive
warnings. Keep a record of when certificates need to be renewed.

LenelS2 NVR System User Guide 35

 LenelS2 NVR System and the Use of Security Certificates

Types of Security Certificates

There are two types of certificates: self-signed and custom.

Self-signed Certificate
A self-signed certificate is automatically installed.
The LenelS2 Video Web Services create, install, and configure a self-signed certificate by default.
The name of the server to which the certificate is bound is determined automatically through a
method provided by the Windows operating system. In most cases, this certificate can be used
without any additional action. If the server name is incorrect, which can occur if the recorder is
installed on a virtual machine or in a cluster environment, you must manually regenerate the self-
signed certificate and specify the correct server name. For more information, refer to Manually
Regenerate and Reinstall the Self-Signed Certificate for the LenelS2 Video Web Services on page 36.

Custom Certificate
A custom certificate can be manually installed. Obtain a custom certificate from a trusted Certificate
Authority. Follow the instructions provided by the trusted Certificate Authority to generate a
Certificate Signing Request (CSR). You can use whichever Certificate Authority you prefer.

Certificate Management
Managing self-signed certificates is different from managing custom certificates.
For the LenelS2 Video Web Services, a default self-signed security certificate is installed on the
recorder.

Default Self-Signed Certificate for the LenelS2 Video Web Services

The default self-signed certificate for the LenelS2 Video Web Services may be regenerated and
reinstalled:
• Manually to correct a server or domain name
• Automatically to update a server name or domain change

Manually Regenerate and Reinstall the Self-Signed Certificate for the LenelS2
Video Web Services
In some cases the default certificate might not match the server name, such as in a virtual or cluster
environment, or when the server is not connected to any domain. If the certificate does not match the
server or domain name, use these steps to manually regenerate and install the self-signed certificate.
1. Open a Windows command prompt as an administrator.
2. Navigate to the applicable folder:
C:\Program Files (x86)\LNVSuite\nginx\Certificates\ folder.

36 LenelS2 NVR System User Guide

Certificate Management

3. Run the following command to reissue the certificate with the correct server name:
lnl_app_server_certificate_installer.exe
-key="..\conf\lv_webservice_key.pem"
-cert="..\conf\lv_webservice_cert.pem" -no_ms_store -cn=<server>
where <server> is the name of the recorder
4. After making any certificate change, restart the LenelS2 Video Web Services.
Click the Start button, then select All Programs > LenelS2 Video Web Services > Stop Web
Services and then Start Web Services.

Automatically Regenerate and Reinstall the Self-Signed Certificate for the

LenelS2 Video Web Services
If, after successful installation of the LenelS2 Video Web Services, the recorder's name or domain
changes or the certificate is about to expire, the certificate must be regenerated and installed.
1. Click the Start button, then select All Programs > LenelS2 Video Web Services > SSL
Certificate Installer.
A new certificate is automatically generated and installed using the current server and domain
names. The new certificate has a new expiration date. If the default certificate does not match the
server name, refer to Manually Regenerate and Reinstall the Self-Signed Certificate for the
LenelS2 Video Web Services on page 36.
2. After making any certificate change, restart the LenelS2 Video Web Services.

Custom Certificates
Using a custom certificate provides advantages over using the default self-signed certificate but can
potentially increase acquisition and maintenance costs. After the certificate is issued by the
Certificate Authority, install the certificate and configure the recorder to use the certificate.

Install a Custom Certificate

Install the custom certificate following the instruction provided by the Certificate Authority for the
NGINX web server.

Notes: If you are re-issuing a certificate, delete all existing certificates.

LenelS2 NVR System: The default self-signed certificate files installed by the LenelS2
Video Web Services are located in the C:\Program Files (x86)\LNVSuite\nginx\conf\
directory and have .PEM extensions. It is not necessary to install the custom certificate
files into this folder, but it is recommended.

Configure the Name and Location of the Custom Certificate

1. Locate the following lines in the C:\Program Files
(x86)\LNVSuite\nginx\conf\lv_server_sslcert_location.conf file:
ssl_certificate lv_webservice_cert.pem;
ssl_certificate_key lv_webservice_cert_key.pem;
These lines identify where NGINX expects to find the certificate files. The
lv_webservice_cert.pem file is the public key, and the lv_webservice_cert_key.pem file is the
private key. No path information is specified because the .PEM files reside directly in the \conf
folder.

LenelS2 NVR System User Guide 37

 LenelS2 NVR System and the Use of Security Certificates

2. Modify the lines to identify the names and locations of the custom certificate files using the
following syntax:
ssl_certificate <path to server cert file>\<server cert filename>;
ssl_certificate_key <path to cert key file>\<cert key filename>;
3. After making any certificate change, restart the LenelS2 Video Web Services.
Click the Start button, then select All Programs > LenelS2 Video Web Services > Stop Web
Services and then Start Web Services.

IMPORTANT: This process must be repeated if the LenelS2 NVR system is reinstalled or
upgraded.

IMPORTANT: Never share the key file. Doing so can compromise your TLS security.

38 LenelS2 NVR System User Guide

Index

A Installation
Analytics ............................................................ 7 DirectX ..................................................... 19
Antivirus software .......................................... 15 supplemental materials .......................... 19
Authentication ................................................. 13 UAC .......................................................... 19
unattended ................................................ 22
B
Backward compatibility ................................... 8 L
LenelS2 NVR system ...................................... 7
C cameras supported .................................... 9
configuration ............................................. 7
Cameras
configure IP address ............................... 15 considerations .......................................... 13
features ....................................................... 7
supported capabilities .............................. 8
installation ............................................... 19
Certificates, see Security certificate ............ 35
issues and actions ................................... 29
network configuration ............................ 15
D network setup .......................................... 25
Data storage ..................................................... 14 ONVIF ........................................................ 9
DCOM configuration ..................................... 30 overview ..................................................... 7
De-warping ........................................................ 9 prerequisites ............................................ 14
Digital video ............................................... 7, 33 prerequisites for unattended installation
Disc reclamation ............................................. 14 or upgrade ................................ 22
Disk defragmentation ..................................... 15 server
log files ............................................. 29
E unattended installation or upgrade ....... 22
Event Mode recording ................................... 10 uninstall server software ....................... 31
LenelS2 Video Web Services
F not working .............................................. 29
Firewall blocks access ................................... 29 web server port settings ......................... 27
LNV Suite
H command syntax ..................................... 24
command syntax to install all
Hyper-V .............................................................. 9
features ..................................... 24
log files ..................................................... 29
I prerequisites ............................................ 22
IIS ...................................................................... 30

LenelS2 NVR System User Guide 39

 Index

LNVR Network Setup tool ........................... 25 S

client setup ............................................... 25 Security
configure multicast ................................. 26 configuration prerequisites ................... 16
how to run ................................................ 25 policies ..................................................... 16
multicast Security certificate
configure every client .................... 26 custom ...................................................... 37
configure the network router ........ 26 configure .......................................... 37
configure the recorder .................... 26 install ................................................ 37
recorder setup .......................................... 25 obtain ................................................ 36
Log files, server .............................................. 29 default self-signed .................................. 36
obtain ................................................ 36
M regenerate automatically ............... 37
Multicast ........................................................... 26 regenerate manually ....................... 36
expiration date ......................................... 35
N Secure Socket Layer (SSL) ................... 35
Network Transport Layer Security (TLS) ........... 35
configuration ........................................... 15
prerequisites ..................................... 15 T
configure permissions ............................ 15 Time synchronization .................................... 15
storage ....................................................... 10 Troubleshooting .............................................. 29
NGINX ............................................................. 35
Normal Mode recording ................................ 10 U
Unattended installation or upgrade .............. 22
P configuration file .................................... 23
Permissions ...................................................... 14 limit access to the user group ............... 24
Ports User group, limit access to ..................... 16, 24
conflicts .................................................... 30
setting ........................................................ 27 V
Prerequisites .................................................... 14 Video
administrator rights ................................ 14 locking ...................................................... 11
limit access to the user group ............... 16 not accessible .......................................... 30
review DCOM settings .......................... 16 streaming with RTP/RTSP .................... 11
security ..................................................... 16 vSphere ............................................................... 9
Windows firewall configuration .......... 16
PTZ
connections and device configuration . 27
W
priority control and locking .................. 10 Windows
firewall configuration prerequisites .... 16
updates ...................................................... 14
R
Recorder failover ............................................ 10
Recording ......................................................... 10
event mode ............................................... 10
normal mode ............................................ 10
Recovery Tool ................................................. 33
Retention .......................................................... 14

40 LenelS2 NVR System User Guide

Index

LenelS2 NVR System User Guide 41

1212 Pittsford-Victor Road
Pittsford, New York 14534 USA
Tel 866.788.5095 Fax 585.248.9185
www.LenelS2.com