Nx Server Archive Encryption

Nx Witness 5.0 introduced Archive Encryption, a new feature that enhances the security of the Nx Server by allowing video archive files stored in the storage volume to be encrypted. Archive Encryption prevents the video archive from being viewed outside the Nx Witness system.

How does Archive Encryption work?

On Nx Servers with Archive Encryption enabled, the video archive is encrypted by the AES-128-CTR algorithm, while the archive encryption password is encrypted by SHA-256 in the database.

Even if the storage is accessed by a third party and the video files have been stolen, the intruder would be unable to play the footage correctly.

Encrypted video files open outside of Nx Witness via any media player will only see content similar to the image below.

How to Enable Archive Encryption

1. Open Main Menu > System Administration > Security
2. Toggle the Archive encryption switch.
3. Enter the archive encryption password.
   Note: This password cannot be reset. Please keep it somewhere safe, as if you lose the password, the archive will be unrecoverable.
4. Click the OK button to save the change. 

Using Nx Witness with an Encrypted Archive

Archive Encryption is a system-wide function so that all users can access and play video archives as previously. There is no tangible difference while interacting with footage in Nx Witness after enabling Archive Encryption.

Administrators can change the password or turn off the Archive Encryption at any time. Archive Encryption will only affect newly recorded archive files. Existing video files will not be affected by the new setting, as they would remain unencrypted or encrypted by the previous password if this feature was enabled more than once.

Users do not need to know the encrypted password to access the video archive via the Nx Client or Nx Mobile. The server will save all the encryption passwords and select the correct password to decrypt the archive. Nx Server will ask for the encryption password if the encrypted video archive is restored or moved to the storage volume of the other server.

Questions

If you have any questions related to this topic, or you want to share your experience with other community members or our team, please visit and engage in our support community or reach out to your local reseller.