ONVIF Phases Out Profile S, Promotes Profile T For Enhanced Security

onvif-logo

Transition Marks Shift Toward More Secure Video Surveillance Standards

ONVIF has announced it will end support for Profile S and recommends adopting Profile T as its successor.

Introduced in 2011, Profile S was ONVIF’s first profile, enabling basic video streaming interoperability between devices like IP cameras and video management software. However, its authentication mechanisms no longer meet current cybersecurity standards.

“After 14 years, Profile S has served its purpose of enabling interoperability for more than 33,000 devices and clients,” said Leo Levit, Chairman of the ONVIF Steering Committee.

“We recognize the need to phase it out in line with modern security recommendations and encourage the use of Profile T, which better supports current surveillance requirements.”

Profile T: The Recommended Successor

While the deprecation of Profile S will not affect deployed systems, ONVIF strongly advises discontinuing the use of username token authentication in Profile S. Instead, it recommends more secure methods such as TLS (Transport Layer Security) or adopting Profile T.

Launched in 2018, Profile T includes nearly all Profile S features plus advanced capabilities for video surveillance. Most ONVIF-conformant devices and clients already support both profiles, simplifying the transition.

Strengthening Cybersecurity Standards

ONVIF urges integrators and end users to follow manufacturer hardening guides, adopt best practices, and stay informed about evolving technologies. The ONVIF Network Interface Specifications define network protocols with built-in security measures like TLS, preventing eavesdropping and tampering.

Manufacturers can implement these specifications even if they’re not included in a specific profile, ensuring continued flexibility and compliance.

Key Timeline and Next Steps

The June 2026 version of the ONVIF conformance test tools — valid for nine months — will be the last version allowing manufacturers to claim Profile S conformance.

Additionally, ONVIF will upgrade its TLS Configuration Add-on specifications at the end of 2026. Unlike profiles, add-ons can evolve more easily to accommodate new technologies.

Expanding Interoperability Efforts

Founded in 2008, ONVIF now includes a global network of camera, video management, and access control companies, with more than 33,000 profile-conformant products.

In addition to Profiles S and T, ONVIF supports:

  • Profile G for video recording and storage
  • Profile C for physical access control
  • Profile A for access control configuration
  • Profile M for analytics metadata and events
  • Profile D for access control peripherals

visit www.onvif.org.


Frequently Asked Questions (FAQs)

1. Why is ONVIF discontinuing Profile S?
Profile S is being phased out due to outdated authentication mechanisms that no longer align with modern cybersecurity standards.

2. Will existing Profile S systems stop working?
No, deployed systems will continue operating, but ONVIF encourages upgrading to Profile T where possible.

3. What are the main benefits of Profile T?
Profile T offers advanced video streaming capabilities, enhanced security features, and broader support for modern surveillance applications.

4. When will Profile S conformance officially end?
Manufacturers can claim conformance using the June 2026 ONVIF test tools, after which support will be discontinued.

5. What security measures does ONVIF recommend?
ONVIF advises using TLS/HTTPS authentication, following hardening guides, and keeping systems updated to meet current cybersecurity best practices.

Source: onvif.org
0 Comments