Frustration mounting over having to contact manufacturer for resets on lockouts

[ThreshCamer]

I've never "settled" on a product line. Each install has been a bit different make or model. I started heading towards hikvision products and have been a bit miffed about the password reset mechanism they implemented. Starting to feel like I (or my clients) don't actually own their equipment.

Either I am misunderstanding their process, or I am needing suggestions on different manufacturers.

I setup one of their commercial NVRs, in a hurry, forgot to log the password and didn't do the 3 questions to recover. (Shit happens! ha!) So as I try to get back into the unit, I fail have to contact Hik and am getting a bit of run around, but finally got an xml file.

Now part of my question is, they asked personal info, serial number, etc, but there's nothing to prove I wasn't a thief or otherwise. So what is the purpose of this lockout?

Anyway, I am looking for suggestions on manufacturers that are not doing the hikvision style of password reset.

Very frankly, sometimes I just get "stcuk" in hikvision interfaces anyway.

I've worked with Acti, axis (bit too pricey for most of my client requests), I've worked with rebranded Hik (northern video) and Hik directly.

Would love to have a bit of discourse on the topic and learn from the greater whole.

 

[fenderman]

I've never "settled" on a product line. Each install has been a bit different make or model. I started heading towards hikvision products and have been a bit miffed about the password reset mechanism they implemented. Starting to feel like I (or my clients) don't actually own their equipment.

Either I am misunderstanding their process, or I am needing suggestions on different manufacturers.

I setup one of their commercial NVRs, in a hurry, forgot to log the password and didn't do the 3 questions to recover. (Shit happens! ha!) So as I try to get back into the unit, I fail have to contact Hik and am getting a bit of run around, but finally got an xml file.

Now part of my question is, they asked personal info, serial number, etc, but there's nothing to prove I wasn't a thief or otherwise. So what is the purpose of this lockout?

Anyway, I am looking for suggestions on manufacturers that are not doing the hikvision style of password reset.

Very frankly, sometimes I just get "stcuk" in hikvision interfaces anyway.

I've worked with Acti, axis (bit too pricey for most of my client requests), I've worked with rebranded Hik (northern video) and Hik directly.

Would love to have a bit of discourse on the topic and learn from the greater whole.

Use a pc based vms.

 

[tangent]

More complicated password requirements and reset procedures are largely a response to malware that targets cameras and nvrs

 

[fenderman]

More complicated password requirements and reset procedures are largely a response to malware that targets cameras and nvrs

I dont know why they cannot have a reset button on the board in the unit just like they do in many cameras.

 

[tangent]

I dont know why they cannot have a reset button on the board in the unit just like they do in many cameras.

Planned obsolescence? It's not as if it provides any meaningful measure of physical security. I'd rather have a spot for a padlock or kingston lock than their reset bs.

 

[alastairstevenson]

forgot to log the password and didn't do the 3 questions to recover.

There are 3 ways to do self-service password resets that circumvent the need to contact Hikvision.
Use them and avoid the frustration.

Anyway, I am looking for suggestions on manufacturers that are not doing the hikvision style of password reset.

It's really not that hard to do - I don't know why you have a problem with it.
Doing commercial installs - and not following a procedure?

 

[ThreshCamer]

Interesting feedback. Appreciate it. Stoked for the replies. Didn't get any suggestions on companies who aren't trying to lock us down to their clouds, resets, etc. Would love some chatter on that as well.

My replies, perhaps not needed but here we go:
@fenderman PC NVR is fine. Have 4 of them in service. 2 Milestone and 2 ACTi. Funny enough we were replacing an old milestone server with a HIK product that was suggested to me for ease and AIO function. I've been enjoying the one stop shop for license, and ordering on these AIO NVRs but I do not love the weird GUI issues with adding remote or network connected cameras. They began disabling reset from the NVR mobo a while back. So planned obsolescence is certainly part of it, but doesn't it feel like this is another step in creating hardware that we don't fully own or control (see John Dear lawsuits)

I understand why the password reset procedures are enabled like this @tangent but this is removing our own right to own your equipment outright so I feel ya, get off these bad companies if you don't like their process, so yeah I am whining a bit here . Other manufacturers have dealt with the malware and default password issues in different ways. I was just curious as to what is happening on these forums.

@alastairstevenson Those processes you mention, well as I review they don't seem to be in the manual, they are not part of their Hik training and they are not on their website support. You are suggesting third party, is that correct? The password reset tool hosted on this site didn't seem to mention the firmware revision of this NVR, etc. I am not debating the idea that I have a problem with it that others may not. But again, if you have to contact a manufacturer to control your own hardware, OR use third party tools that are not endorsed, than I come back to asking, what companies are not doing this?

And yes @alastairstevenson sometimes, in the commercial world, when you are hiring and firing and crews go out to do jobs, they miss shit. They miss protocols, trouble flows, sealing cameras properly, all sorts of shit. I take the heat for them even if they are no longer employed, it's my mistake either by way of bad training or management or communication. Trust me when i say your words are as true as they get. But just to be a bit sarcastic in reparte, plenty of "commercial install employees" do not follow procedure, which is part of the trick of being and finding good managers for field crews. Shit, they built that skyscraper in San Fran that is falling over...so don't hate on me for locking myself out of a NVR because I didn't have the right guy on the right part of the install! haha!

Thanks gents, love the back and forth. Feel free to roast me!

 

[alastairstevenson]

You are suggesting third party, is that correct?

Those processes you mention, well as I review they don't seem to be in the manual, they are not part of their Hik training and they are not on their website support.

I was thinking of your own procedures covering the installation work.
Even something simple like a tickbox checklist so important things don't get missed can make up for plenty of human failings.

But again, if you have to contact a manufacturer to control your own hardware, OR use third party tools that are not endorsed, than I come back to asking, what companies are not doing this?

Hikvision are no longer doing this on the current products and firmware, it's self-service reset now.
Even Herospeed now have a 'security Q&A' self-service password reset in their firmware.

 

[ThreshCamer]

Thanks @alastairstevenson ! And I agree, my own procedure cleanup would be best.