Firmware NDM-7703-A

New Features:
• Support of DINION 3100i IR and FLEXIDOME indoor/micro/outdoor 3100i models.
• Support of DINION 7100i IR with 8MP and telescopic lens.
• Default settings have been changed for the RCP+, HTTP and RTSP ports. These will become effective with new cameras and by factory-defaulting a camera but will not be affected by upgrading firmware to avoid functional interrupts of existing installations. For detailed information on “Security by Default” please refer to our tech note at https://www.boschsecurity.com/xc/en/solutions/video-systems/data-security/#downloads
• Support of Privacy Mode without requiring a license. The demo license keys mentioned with firmware 9.00 are deprecated. Settings from the demo mode will be inherited.
• Blurring pattern masks (pixelization) can be applied to static privacy masks to allow IVA to detect objects behind the masks while safeguarding the privacy of the region. To set this pattern, check the privacy masks tabs on the Web-GUI.
• Privacy mode can be enabled, acting as a dynamic privacy mask that blurs objects detected by the camera, such as people and cars. This should be activated through the encoding and installer menu on the Web-GUI. The feature is not available for FLEXIDOME indoor/micro/outdoor 3100i, FLEXIDOME multi 7000i and FLEXIDOME multi 7000i IR.
• The Bosch font used for on-screen display (video stamping) has been exchanged to support a wider range of languages, including Hebrew as well as Arabic and Asian languages. Some of these fonts require right-to-left support, which is now also supported.
• Improved motion streaming has been implemented to provide better image quality with lower noise and motion artifacts, thus allowing an even further reduced bitrate.
• Hashing algorithms have been extended to support SHA512, increasing the number of supported cipher suites.
• Recording encryption on iSCSI targets now supports certificates using RSA key lengths of up to 4K bits as well as elliptic curve keys.

Changes:
• An issue with DNS queries has been fixed.
• Imaging improvements to reduce motion blur on FLEXIDOME panoramic 5100i.
• An issue where metadata generation settings could be lost after a reboot is fixed.
• An issue is fixed with unstable IVA trajectories.
• An issue is fixed with 802.1x network authentication when using a certain type of certificate.
• Missing heater configuration settings have been re-enabled for FLEXIDOME multi 7100i models.
• Audio interface has been extended to support internal and external microphones on applicable cameras.
• Default bitrates for H.264 and H.265, which typically differ due to the better compression factor of H.265, are now correctly applied when switching encoding algorithms.
• Improved security baseline by regular update of components and libraries.
•

SHA256: BD4CED5D18A5D65BCE37CE5411B9065F4157D25FEE1D398FBCCAB1A2B3684BC6

New Features:
• Support of new camera family DINION 5100i IR.
• Support of new camera family FLEXIDOME corner 7100i IR.
• Support of new camera family FLEXIDOME micro 3100i.
• Introducing Intelligent Video Analytics (IVA) Pro Visual Gun Detection, based on Deep Learning and is designed for automatic detection of people and brandished firearms. Deployable under a dedicated license, IVA Pro Visual Gun Detection is available for deployment on DINION 5100i IR, DINION 7100i IR, FLEXIDOME indoor 5100i (IR) and FLEXIDOME outdoor 5100i (IR).
• Introducing Scene Mode Configuration for 3rd party License Plate Recognition solutions. This mode can be selected in the GUI and aim to optimizes image clarity for LPR analysis, on 3rd party software like VMSs or servers, by fine-tuning camera settings.
• The Temporal/Spatial Noise Filtering sliders have been reinstated in the latest update. This feature provides precise control over bitrate and image quality, allowing for a balanced adjustment between noise and motion blur.
• In version 9.00.0210, the Privacy Mode feature for CPP14 is presented as a demo. To access this feature, a global license needs to be deployed into the camera. Enabling the demo version of the Privacy mode:
• 22-01.85.01-CEC36083-7BE934CF-4193C2F8-0EFB206D-8F7307B9 And the default configurations can be re-activated by installing:
Disabling the demo version of the Privacy mode:
• 22-01.85.00-EFCC4FE1-C8DE66F8-0822F9C4-4D0DF3B7-40688183 Under the global license, users have the flexibility to enable or disable the privacy mode. In privacy mode:
• Blurring pattern masks (pixelization) can be applied to static privacy masks to allow IVA to detect objects behind the masks while safeguarding the privacy of the region. To set this pattern, check the privacy masks tabs on the Web-GUI.
• Privacy mode can be enabled, acting as a dynamic privacy mask that blurs objects detected by the camera, such as people and cars. This should be activated through the encoding and installer menu on the Web-GUI. As a demonstration of the feature, some limitations on performance are expected and users’ feedback will be very valuable for improvements on the first official version of the feature. The feature is not available for FLEXIDOME micro 3100i, FLEXIDOME multi 7000i and FLEXIDOME multi 7000i IR.
• Implemented support for 5MP devices, enabling them to efficiently handle 3MP (16:9) resolution at 2304 × 1296, including an upright mode. Additionally, 4CIF resolutions of 704x480@30fps (NTSC) and 704x576@25fps (PAL) are now also supported.
• Implemented white LED support for user-installable LED. The support is restricted to the DINION 7100i IR product family and can be enabled via the Web-GUI of the cameras as soon as the White LED is connected to the camera.
• We've introdu

SHA256: E27CAD41338715B8318D5717F9F2C486D85C706F66CE7501C4E4FB71A9FDB742

New Features:
• Support of new camera family DINION 7100i IR.
• Intelligent Streaming is now also introduced on CPP14 cameras, radically reducing bit rates of encoded video while keeping image quality on high levels. As known from earlier platforms, different levels of bitrate optimization are selectable. Also refer to our ‘Bosch_IntelligentStreaming_WhitePaper.pdf’.
• Autocalibration allows the calibration of the cameras with minimal effort, just providing camera orientation and height. The camera will start the calibration process by using the P3D detector to identify objects and use this data as an input for estimating calibration. Once sufficient data is collected the camera is fully calibrated.
• Intelligent Audio Analytics is now commercially available on FLEXIDOME panoramic 5100i based on a perpetual license that can be ordered separately and installed via Remote Portal. This license enables audio analytics with sound detectors for:
• T3 Alarm, Smoke detectors, three intermittent beeps followed by a period of silence
• T4 Alarm, Carbon monoxide detectors, four intermittent beeps followed by a period of silence
• Gunshot Direction of sound is detected and included in metadata. Alarms created by audio analytics are made available via the same interfaces used by other analytics, thus allow an easy integration. A demo mode is available, including the possibility to upload audio samples for analysis.
• Support of Simple Network Enrollment Protocol (SCEP) to allow an easier integration into Public Key Infrastructure (PKI) due to highly automated certificate distribution and renewal. Also refer to the tech note ‘Bosch_CertificateManagement_TechNote.pdf’.
• Cameras with a USB port option can be equipped with a WLAN USB stick to make commissioning of cameras easier, especially using Project Assistant. Supported USB sticks are:
• Edimax V2 N150 (based on chipset RTL8188EU)
• TPLINK TL-WN725N
• Network Authentication 802.1x now supports certificates using elliptic curve certificates and SHA384 hashing algorithm.
• The cameras now support intermediate certificates.
• New 8.3MP resolution support for FLEXIDOME panoramic 5100i 9MP to improve compatibility with some video management systems.

Changes:
• An issue is fixed where the secure element could be permanently damaged due to wear-out of its internal flash memory. This issue is only applicable if video authentication is enabled with default settings, using MD5, SHA1 or SHA256 as hashing algorithm. The error was introduced with FW 8.50 and affects all firmware versions since. For more details refer to our Security Advisory BOSCH-SA-435698-BT, published at our Security Advisory web page https://www.boschsecurity.com/xc/en/support/product-security/security-advisories.html or visit our PSIRT website at http

SHA256: 24E8FBA942560F7D50D790F3DD91963202139214539866CDE740DB1841C9995A

New Features:
• Adaptive IR has been introduced based on scene content to avoid over-exposure if objects are close to the camera.
• Highly reliable SD card recording with life cycle monitoring Industrial SD cards which provide wear level data can be monitored for their health and expected lifetime, providing much more reliable SD card recording. Three vendors have been tested and qualified:
• Micron
• Sony
• Western Digital (SanDisk) Due to the high dynamic in the Industrial SD card market, no direct reference to the models can be given. Therefore, Bosch has selected specific WD models and provides them as accessory:
• MSD-064G, MSD-128G, MSD-256G, SD-064G, SD-128G, SD-256G
• Genetec Stratocast support has been re-enabled with the same feature set as known from former platforms.
• Dynamically colored privacy masks, depending on surrounding video added. This can be used to not distract the operator due to intense color, e. g. white privacy mask in night scene.
• A stronger hashing algorithm, SHA384, is supported for HTTPS and network authentication 802.1x usages with RSA key certificates.
• The network parameter ‘hostname’ now remains in the configuration during factory default sequence due to application variant switching.
• Support of up to 4096 bit RSA key length in the Secure Element. This allows the creation of Certificate Signing Requests with up to 4096 bit RSA keys, and securing private data with hardware-protected 4096 bit RSA encryption and signature keys.
• Certificates with key length of 3072 bit and 4096 bit, using hashing algorithm of up to SHA256, can be used for HTTPS, EAP-TLS and user authentication usages.
• Network authentication 802.1x with EAP-MD5 and EAP-TLS is now supported.
• More streaming resolutions were added on streams 2 and 3.
• Support of ONVIF Profile M, including MQTT event forwarding.
• New Western Digital industrial SD cards with lifespan monitoring are supported.
• SNMP has been added, supporting v1 and v3, both including traps. RCP+ integration is widely done to create similar support as of earlier platforms. New MIB file is available and distributed with the firmware package.
• IR intensity level can be independently configured for each of the center and the four surrounding regions.
• Privacy masks can be enabled and disabled via a single switch command.
• For backward compatibility with legacy clients, applicable where alternative measures are put in place, the check on the HTTP referrer, an improvement to reduce the vulnerability for Cross Site Request Forgery (CSRF) attacks, can be disabled via the user interface.
• TLS 1.3 is supported, including the possibility to set the minimum TLS version.

SHA256: 88CEE37A21298F2C7A88ECA19E867F831A875D7D3C43BC752DCACE6B2A5F22FE

New Features:
• Highly reliable SD card recording with life cycle monitoring Industrial SD cards which provide wear level data can be monitored for their health and expected lifetime, providing much more reliable SD card recording. Three vendors have been tested and qualified:
• Micron
• Sony
• Western Digital (SanDisk) Due to the high dynamic in the Industrial SD card market, no direct reference to the models can be given. Therefore, Bosch has selected specific WD models and provides them as accessory:
• MSD-064G, MSD-128G, MSD-256G, SD-064G, SD-128G, SD-256G
• Genetec Stratocast support has been re-enabled with the same feature set as known from former platforms.
• Dynamically colored privacy masks, depending on surrounding video added. This can be used to not distract the operator due to intense color, e. g. white privacy mask in night scene.
• A stronger hashing algorithm, SHA384, is supported for HTTPS and network authentication 802.1x usages with RSA key certificates.
• The network parameter ‘hostname’ now remains in the configuration during factory default sequence due to application variant switching.
• Support of up to 4096 bit RSA key length in the Secure Element. This allows the creation of Certificate Signing Requests with up to 4096 bit RSA keys, and securing private data with hardware-protected 4096 bit RSA encryption and signature keys.
• Certificates with key length of 3072 bit and 4096 bit, using hashing algorithm of up to SHA256, can be used for HTTPS, EAP-TLS and user authentication usages.
• Network authentication 802.1x with EAP-MD5 and EAP-TLS is now supported.
• More streaming resolutions were added on streams 2 and 3.
• Support of ONVIF Profile M, including MQTT event forwarding.
• New Western Digital industrial SD cards with lifespan monitoring are supported.
• SNMP has been added, supporting v1 and v3, both including traps. RCP+ integration is widely done to create similar support as of earlier platforms. New MIB file is available and distributed with the firmware package.
• IR intensity level can be independently configured for each of the center and the four surrounding regions.
• Privacy masks can be enabled and disabled via a single switch command.
• For backward compatibility with legacy clients, applicable where alternative measures are put in place, the check on the HTTP referrer, an improvement to reduce the vulnerability for Cross Site Request Forgery (CSRF) attacks, can be disabled via the user interface.
• TLS 1.3 is supported, including the possibility to set the minimum TLS version.

Changes:
• An issue is fixed where necessary network settings were set to default on application variant switching. This includes the hostname setting as well as the Remote Portal credentials.
• An issue is fixed where a profile nam

SHA256: 76D825F05B774E35464E25DE91AD0AB82A3EDDBA56F1A547822E4E4C83349B59