Body camera enterprise Wi-Fi network Quick Start Guide

This guide assists network administrators in configuring Extensible Authentication Protocol-Transport Layer Security (EAP-TLS) enterprise Wi-Fi networks for integration of body worn camera (BWC) devices with existing networking hardware.

Prerequisites

  • An active Axon Evidence account with administrative permission to create or modify network configurations, such as Wi-Fi networks and firewall rules.
  • Network router/access point with WPA2 EAP-TLS Enterprise security.
  • Network administrative access.
  • Minimum firmware version required for your Axon Body Worn Camera:
    • Axon Body 3 - Version 1.28
    • Axon Body 4 - Version 1.2402

Learn more about how to update firmware.

Step 1 - Network preparation

  1. Firmware updates: Ensure your network hardware is running the latest firmware.
  2. Network synchronization: Verify that time and date settings are consistent across network devices to avoid authentication issues.
  3. Security settings: Confirm that WPA2 EAP-TLS Enterprise security settings are available and select a strong, unique SSID for your BWC network.

Step 2 - Configure your network

  1. Access point configuration: Set up your router or access point to serve as an enterprise-grade Wi-Fi network:
    1. Enable WPA2 EAP-TLS Enterprise security.
    2. Configure necessary networks settings to support authentication, such as VLANs, Access Lists, or other network settings.
    3. Configure RADIUS authentication with your server to manage device connection securely.
  2. DHCP settings: Set up your IP range based on youor network and security policies.
  3. Firewall rules: Implement necessary firewall rules to allow traffic from BWC devices to the necessary management servers and out to the internet. See Axon IP addresses and network requirements to learn more.
  4. Identity Server configuration: Verify that your Identity Server can handle authentication requests.

Step 3 - Add a BWC network to Axon Evidence

  1. Sign in to your Axon Evidence administrator account.
  2. Select Admin, and then under Devices and Applications select Body Camera Wi-Fi Networks to open the Body Camera Wi-Fi Networks page.
  3. Select Add Network to open the Add Network pane
    Body camera Wi-Fi network page, with a focus on the Add Network button.
  4. In the Add Network pane, select WPA2 Enterprise from the Network Type list, and then complete the following fields:
    Note: Templates such as {assigneeEmail}, {assigneeUserName}, and {serial}, can be used in the Subject Name and SAN Type fields to dynamically match your configuration. These templates are case insensitive and will resolve to the specific assignee data for each BWC. Ensure corresponding accounts are properly configured in your identity server to match these details.
    1. Network Name (SSID) - Enter the SSID of your Wi-Fi network.
    2. SCEP URL - Enter the SCEP URL, ensure it's correctly formatted, e.g., 'https://example.com/scep'.
    3. SCEP Static Challenge - Enter the static challenge required by your SCEP server.
    4. Subject Name - It's mandatory to enter CN=username or CN=email in the Subject Name field to match your identity server configuration. Additional details can be included by separating them with commas, e.g. C=US, CN=myUsername, O=Axon.
    5. SAN Type - The SAN Type field is optional and allows you to choose User Principal Name or Email and Input: {assigneeUserName}. For Microsoft servers, it's common to require a User Principal Name, which is normally configured to match username or email settings in your identity server settings. Consult your identity server to confirm the appropriate configuration.
    6. Notes - Optionally, enter relevant location details to aid in data organization.
      Add network configuration options.
  5. Select Save.

Troubleshooting

  • Confirm network configurations and server accessibility if connection issues arise.
  • Utilize device logs for troubleshooting.
  • For issues within the Axon Evidence setup, contact Axon Technical Support.

For specific configurations and advanced settings, contact your hardware manufacturers support.

Additional resources

For further guidance and detailed information, refer to the following resources: