Keeping SSMS Secure: Passwords, Workstations and Camera Logins

A CCTV system holds sensitive video of people and places. If the wrong person gets in, they can watch your footage or stop cameras from working. Most problems start small: a weak password, an unlocked screen, or remote access that nobody switched off. This guide lists simple habits for operators and IT admins that keep SSMS safe.

Open the console the right way

Your Skyline engineer shows you how to open the SSMS console at handover. Always use that way. Do not install extra copies or shortcuts that you find somewhere else.

• If you were given a personal sign-in, it is yours alone. Never share it, even with a colleague on the same shift.
• Never write a password on a sticky note, the desk or the monitor.
• If a colleague needs access, ask your supervisor. Do not lend them yours.

Use strong passphrases

A passphrase is a password made of several random words. It is long, so it is hard to guess. But it is still easy to remember.

1. Pick four or more words that do not belong together.
2. Add a number or a symbol if your password rules ask for one.
3. Do not use names, birthdays, car plates or the company name.
4. Do not reuse a password from email, banking or social media.
5. Change it straight away if you think someone saw it.

Lock the screen every time you leave

An unlocked console lets anyone walk up and watch, or change things. Lock the computer screen whenever you step away, even for one minute. Your IT admin can show you the quickest way on your computer. They can also set the screen to lock by itself after a short idle time.

Camera and NVR passwords

Every camera and NVR has its own login. Many devices leave the factory with a default password. Default passwords are published online, so attackers try them first.

1. Change every default password before or during setup.
2. Give each device a strong, different password where you can.
3. Store the passwords in a safe place your IT team controls, such as a password manager. A password manager is a program that keeps passwords in an encrypted vault.
4. Share device logins with Skyline only in the secure way you agreed with them.

Why a password change can take a camera offline

During setup, you give the Skyline engineer the device login details. SSMS uses them to connect to each camera or NVR. If someone later changes a camera or NVR password, SSMS can no longer connect. The camera then stops showing live video, and it stops recording.

So follow one simple rule: before anyone changes a device password, they tell the IT admin. The IT admin then makes sure the new login is entered in SSMS, the way shown at handover or with help from Skyline support.

Keep computers up to date

The SSMS server and the console workstations are normal computers. They need security updates like any other computer. A security update is a fix from the maker that closes a known weakness.

• Install operating system updates as your IT policy says.
• Tell Skyline before major changes. Examples are a new operating system version, new antivirus software, or moving the server. A quick check first avoids surprises.
• Do not install games, browser add-ons or other software you do not need on the console workstation.

Control remote access

During setup, the Skyline engineer needs remote access to your server. Remote access means someone works on a computer over the network from another place. It is useful, but it is also a door into your system.

1. Give remote access in a controlled way that your IT team approves.
2. Use a separate login for the engineer, not a shared admin password.
3. Remove or disable that access when setup ends, or when a support job is done.
4. Turn it on again only when you ask for help. Turn it off afterwards.
5. Keep a note of when access was opened and when it was closed.

Network design for your sites and for remote support is covered in Connecting sites and remote support safely.

Keep personal USB sticks away

• Do not plug personal USB sticks into the console or the server. They can carry malware, which is harmful software.
• Do not charge phones from the console's USB ports.
• Use only storage devices that your IT team provides.

Protect the rooms, not just the screens

Physical security matters as much as passwords. Anyone who can touch the server can unplug it or take its disks.

• Keep the server room locked. Give keys or door codes only to people who need them.
• Keep the console room closed to visitors, unless a supervisor allows it.
• Place console screens so people outside the room cannot see them through windows or doors.

If you think a login was misused

Act quickly. A small delay can let a problem grow.

1. Change your own password straight away, if you can.
2. Tell your supervisor and your IT admin what you noticed, and when.
3. Write down the time, the workstation, and anything strange you saw.
4. Do not delete or change anything on the system yourself.
5. Your IT admin can contact Skyline support through the contact page or at info@alskyline.com.

Where to go next

• Connecting sites and remote support safely: VPNs, not open ports
• Who may watch and handle footage: a simple CCTV access policy
• What to do when a camera goes offline

Quick checklist

• I open the console only the way shown at handover.
• I never share my sign-in or write passwords down.
• I lock the screen every time I leave the console.
• No camera or NVR still uses its default password.
• Anyone who changes a device password tells IT first.
• The engineer's remote access is off when nobody needs it.
• No personal USB sticks go into the console or the server.
• The server room is locked.