Showing posts with label BIS ER. Show all posts
Showing posts with label BIS ER. Show all posts

Tuesday, September 15, 2026

Difference Between Active vs. Passive PoE

Difference Between Active vs. Passive PoE 

Power over Ethernet or PoE for short can be a new and potentially confusing term to a lot of people searching for security cameras. PoE connectivity simplifies cabling needed to connect a device by allowing power and data delivery over a single network cable such as CAT5e or CAT6. It makes it easy to connect devices such as IP security cameras, or office phones; a separate power supply or electrical outlet for each device is not needed. However, it is important to know the nuances about PoE equipment to avoid damaging your equipment. There are two types of PoE connections - active and passive. While one may think active is with power and passive is without power, that's not correct.

Active Power over Ethernet (PoE) uses an automatic negotiation handshake to safely deliver dynamic power levels based on device requirements, whereas passive PoE sends a constant, fixed voltage without any communication or safety check.

Active PoE

802.3af/at Compliant PoE - Good for IP cameras

Active PoE means that a device is rated to be 802.3af or 802.3at compliant. These are regulated specifications that require a device and power supply to do a “handshake” or verification. The PoE power supply tests the connection to the device and ensures that the power is compatible. If it isn’t, then the device simply will not power up, preventing any potential damage.

Active PoE Standards (IEEE 802.3)

The IEEE defines several Active PoE standards that determine how much power can safely be delivered.

Standard

Name

Max Power

Voltage Range

802.3af

PoE

Up to 15.5W

44–57V DC

802.3at

PoE+

Up to 30W

50–57V DC

802.3bt

PoE++

60–90W

52–57V DC

Passive PoE

Raw unnegotiated power - Bad for IP cameras

Passive PoE refers to any device that does not follow the 802.3af or 802.3at specifications. Passive PoE does not do any sort of power check so it simply supplies power regardless of what it is plugged into. This can damage any equipment not rated to accept the passive PoE power input. It is extremely important to understand the requirements and specifications of your equipment before plugging anything in.

Unfortunately, we see it too often that a customer damages their newly purchased IP security cameras when using a PoE switch such as a Unifi Switch that can output Passive PoE Power. If you choose to use your own PoE switch, we recommend use of reputable manufacturers such as Cisco, Netgear, or TP-Link that manufacture 802.3af/at compliant PoE hardware.

Calculating Passive PoE Power

If a device requires 12W and supports 12–30V, and you are using a 24V Passive PoE injector, you will need at least 0.5A to meet the power requirement:

24V x 0.5A = 12W.

Practical Limits for Passive PoE

·        24V Systems: Typically limited to about 50 metres due to higher voltage drop at lower voltages.

·        48V Systems: More efficient for longer runs, as higher voltage reduces the current needed for the same power, thereby minimizing heat loss (I2R).

·        Wiring: Passive PoE often uses Mode B, sending power over the "spare" pairs: pins 4/5 (+) and pins 7/8 (-)

Now question is How to access a PoE Security Camera from a Computer

We’re often asked how to modify an IP camera’s video settings once you already have it up and running on your NVR. This process can be difficult without any knowledge of computer networking or setting up a standalone IP camera. In this article we explain the technical details of taking a camera from the back of your NVR and connecting to it with either a direct connection or through your network.

The first steps include understanding how a camera and PoE NVR work together, noting the IP address the camera is configured to and finally physically removing the camera from the NVR.

After having a grasp on the basics and noting the IP address of your camera you can then proceed to the next steps. There are two ways that you can connect to a camera’s web interface:

·       The first is through a direct connection into your Windows desktop or laptop that has an ethernet port.

·       The second involves going over your computer network by configuring the camera to communicate on the network.

Be sure to note the IP address of the camera before disconnecting it from the NVR, you will need it later.

A) Direct connection between IP camera and Computer

The easiest way to access an IP camera is by connecting to it directly from a computer. This method requires you have the following:

1.   The IP address of your camera from the NVR registration page

2.   PoE Injector or 12VDC 1A Power Adapter. It is very important to use a CCTV Camera World approved device or you risk frying the camera due to incorrect voltage

3.   Two Ethernet cables (one if using a power adapter)

4.   Windows 11 pro based PC

1. Use a PoE injector to supply power and data

A PoE injector will have two ports, one labeled for PoE or P+D/Out (power and data) and one labeled LAN or Data/In. Connect the PoE injector to a power outlet. Connect an ethernet cable from your PC's network port to the Data/In on the PoE injector. Connect a second ethernet cable from the network camera's RJ45 network jack to the port labeled PoE or P+D/Out. To check if everything is connected properly refer to the lights on the PoE injector and the port on your computer. If you do not see any indication lights you may have a bad cable or do not have the wires connected properly.

2. Use a 12VDC 1A power adapter

A correct power adapter will have a label stating it is 12VDC 1000mA. Connect an ethernet cable from the camera directly to your computer’s ethernet port. A good way to check if the camera is receiving power and communicating with your computer is to look at the lights on your computer’s port. If you have no lights it is important to test that your cable and power supply work with another device.

3. Configure your PC's network port to communicate with the camera

For your computer to "speak" to your camera, you need to set its network port to the same IP address scheme as the camera. Before we disconnected the camera from the back of the NVR, we noted what the IP address of the camera was.

Login to your Windows PC, change your computer's ethernet adapter to communicate with the camera. Use the Network & Internet settings which contains an Ethernet section. Using the change adapter settings set an IP address for your computer that matches the network for the camera. If you do not know how to do this refer to the video above for this step.

4. Test the connection with the Ping command

After powering the camera and configuring your computer to talk with it, it is good practice to test the connection using the Ping command. Simply open the Command Prompt and type Ping with the address of the camera. In our case we used the following command: ping 10.1.1.65 -t press enter key.

5. Access the camera using Internet Explorer

It is important to use Internet Explorer as it is the most compatible browser for accessing security cameras. Type the IP address of your camera into the address bar in Internet Explorer. Some cameras may require initialization and it is recommended to uncheck the Easy4IP and auto-update options when proceeding through the prompts. The password can be admin, or may be printed on the label found on the box of the camera. Note: the customer is responsible for any password change beyond the defaults. There is no master reset password.

After successfully logging into the camera you need to install a plugin to view the camera. Click the link in the center of the page to download the plugin. Make sure to Run and do not save the plugin download. Internet Explorer will prompt you to allow the plugin to run. Once the plugin is installed, you will be required to log back into the camera. You should now see video from your camera and can modify the settings of the camera in the Setting tab within your browser. Make sure when you are done modifying your camera(s) that you change your network settings back to “Obtain IP address automatically” in your network settings, this is demonstrated in the video above.

B) Accessing the camera over your network

Besides direct connection to a computer, the other method to connect to a PoE security camera is over the network. This method requires the following pre-requisites:

1.   A home or business network with router

2.   Windows PC with ConfigTool installed

3.   PoE Injector or 12VDC 1A power adapter

4.   A network cable to connect to your router

5.   The IP address of your camera

1. Power the camera

You can use a PoE injector or 12V DC 1amp power adapter to power the camera and connect to your network router or switch. The process is simple. It is very important to use a CCTV Camera World approved device or you risk frying the camera due to incorrect voltage.

2. Connect the camera to your network router

Instead of connecting the camera directly to your computer, you will connect it to your network router so the computer can communicate with the camera over the network. When following this guide, it is important to connect the camera and computer to the same router or switch. We suggest using a hardwired connection between the computer and the router to prevent a situation where your WiFi network is different from the wired network. If you are knowledgeable about your network setup, feel free to use a WiFi laptop.

3. Use the ConfigTool to find the camera and change its IP address

Using the ConfigTool to find the camera on your network is fairly easy. It is imperative that you turn off any firewall or antivirus program on your computer that may prevent the program from sniffing your network.

4. Access the camera's web interface using Internet Explorer

The steps are similar to method A because the web interface will be the same regardless of how you connect to the camera.

Method for Identifying a PoE Power Supply Failure Caused by High Network Cable Resistance

If network cables can be removed from the switch at the local site, use below method to measure the resistance.

·        Measurement tool: Multimeter

·        Measurement contents and procedure: Use the multimeter to measure the DC resistance of each cable wire and take down the measured values as R1, R2,…R8.

·        Measurement results:

Network cable resistance:

R = (R1 + R2 + R3 + R6)/4 (when the switch uses the wires 1, 2, 3, and 6 to supply power.)

Or:

R = (R4 + R5 + R7 + R8)/4 (when the switch uses the wires 4, 5, 7, and 8 to supply power.)

Usually, the AC and PoE switch use wires 1, 2, 3, and 6 for power supply, and the PoE adapter uses wires 4, 5, 7, and 8 for power supply.

Key Takeaways

The primary difference between Active and Passive Power over Ethernet (PoE) is how they deliver power: Active PoE communicates with a device to ensure it is safe to power, while Passive PoE sends electricity immediately without checking compatibility.

Active PoE (The "Smart" Choice)

Active PoE is the industry standard for most modern business networks.

·        Intelligent Handshake: The power source (PSE) sends a low-voltage signal to detect if the connected device is PoE-compatible and determines exactly how much power it needs.

·        Protection: If you plug in a laptop or a non-PoE device, the switch detects it and sends only data, preventing electrical damage.

·        Common Standards:

o   PoE (802.3af): Up to 15.4W per port.

o   PoE+ (802.3at): Up to 30W per port.

o   PoE++ (802.3bt): Up to 60W or 100W for high-power devices.

Passive PoE (The "Always-On" Choice)

Passive PoE is common in specific setups like outdoor wireless bridges or legacy equipment.

·        No Communication: It does not check the device's needs; it simply pushes a fixed voltage over specific pins in the Ethernet cable.

·        High Risk: If you plug a device into a passive port that doesn't match its required voltage (e.g., 48V into a 24V device), it can cause permanent electrical failure.

·        Manual Matching: You must manually verify that your injector or switch matches the exact voltage and pinout required by your device.

Which should you choose?

·        Choose Active PoE for almost all standard office or home office uses (IP cameras, VoIP phones, modern Access Points) to ensure safety and future-proofing.

·        Choose Passive PoE only if you have specific legacy hardware or budget-constrained outdoor installations where you are certain the power specs match perfectly

How to Find Your Model's Requirements

1.   Check the Physical Label: Look for a sticker on the back or bottom of the device. It will often list "802.3af," "802.3at," or a specific voltage like "24V DC".

2.   Consult the Datasheet: Search for your model number + "technical specs" online. Look specifically for the "Power Method" field.

3.   Check the Box: If you still have the original packaging, the required PoE standard is usually printed on the side near the serial number.

 

Wednesday, April 1, 2026

STQC Certification and CCTV

 STQC Certification and CCTV

CCTV is everywhere now, in metro stations, campuses, warehouses, and housing societies. With that spread comes a tougher question: can you trust what’s on the pole? The government wants a clear “yes”, which is why it’s pushing the market towards standardized, secure-by-design products. The big lever is STQC security certification. It’s not a nice-to-have anymore; it’s the new gate. Manufacturers, integrators, buyers, everyone’s playbook changes in 2025.

STQC, short for Standardization Testing and Quality Certification, is overseen by the Ministry of Electronics and IT (MeitY). Think of it as a seal that says, “This device was built properly and hardened against common attacks.” For surveillance, that covers cameras, DVRs, and NVRs. It looks at product quality, cybersecurity controls, and how data is handled. In other words: fewer soft spots, fewer nasty surprises once the kit goes live.

The Mandatory Requirement

Two dates matter. First, in June 2024, government buyers started insisting on STQC-aligned equipment. Only STQC-certified CCTV products are meant to be sold and integrated in India. No carve-outs for OEMs or import labels. No “we’ll update it later”. If it isn’t certified, it shouldn’t be on the invoice. Simple as that.

As of April 9, 2025, STQC certification is mandatory for all CCTV cameras manufactured, imported, or sold in India. 

·        Government Procurement: Mandatory since June 6, 2024. Any "Made in India" CCTV procured for government projects must strictly adhere to STQC-certified standards.

·        General Market: All IP-based CCTV cameras must comply by the April 2025 deadline to remain legally available for sale.

·        Full Enforcement: From April 1, 2026, no sale of non-compliant CCTV cameras will be allowed, as the previous transition relaxations have been formally withdrawn

Why STQC is mandatory for CCTV?
The Ministry of Electronics and IT (MeitY) made STQC (Standardisation Testing and Quality Certification) mandatory for CCTV systems to ensure:
🔹 Quality & Safety: Cameras must work well and be safe for public use.
🔹 No Spying Risk: To avoid hidden risks like data leaks or spying through poor-quality or foreign-controlled cameras.
🔹 Trusted Performance: STQC checks that the camera meets Indian government standards before it’s used in sensitive places.

STQC = Government-approved safety and quality check for CCTV.

Key Requirements for STQC Certification

This mandate pulls the industry toward “secure by default”. Expect the following to show up in specs and test reports:

·        Secure boot and firmware verification so tampered code can’t sneak in.

·        No default or hardcoded passwords; each device has its own credentials.

·        TLS 1.2+ is a modern way to encrypt streams and management communications.

·        Access restrictions that are quite specific for local and remote logins, together with roles and logs.

·        BIS safety compliance (IS 13252 / IEC 60950-1) where applicable.

·        Chinese-origin OEMs are not eligible for STQC certification.

·        Independent testing at STQC-recognized labs, with proper documentation.

Yes, it’s technical. But it’s also practical. Locked ports. Signed updates. Patch paths that don’t open new holes. That’s how fleets stay healthy.

Who Needs to Comply with This Mandate?

Short answer: the entire chain.

·        Manufacturers, Indian and international, are bringing models to market.

·        OEM partners and importers are rebranding or expanding their ranges.

·        Distributors, retailers, and system integrators are selling or installing systems.

·        Buyers in public projects, smart cities, critical infrastructure, and enterprise.

If you touch CCTV in India, compliance isn’t an afterthought. It’s part of the offer.

What Happens If You Don’t Comply?

Doors close. Non-STQC products become out of bounds for sale and use. You risk being tossed out of tenders. Licenses and approvals can be questioned. Private buyers, especially corporate security teams, will quietly pass. And the reputational hit from a failed audit? That lingers. Why roll the dice when the rules are crystal clear?

Benefits of Using STQC-Certified CCTV Products

In short, here’s what that certification delivers in everyday operations.

·        Stronger cybersecurity out of the box; fewer field incidents, fewer emergency call-outs.

·        Buyer confidence, procurement checks get easier, especially in regulated sectors.

·        Policy alignment with Make in India and Atmanirbhar Bharat priorities.

·        Lower legal and operational risk, plus a smoother path through audits and renewals.

Certification Process for Manufacturers

To obtain the STQC Certificate for CCTV, companies must follow a structured procedure: 

1.   Technical Construction File (TCF): Submit a dossier detailing architecture, firmware versions with hash values, and Bill of Materials (BoM) down to the SoC level.

2.   Lab Testing: Samples are sent to BIS-approved or STQC-recognized labs for functional and cybersecurity stress tests.

3.   Factory Audit: STQC authorities may inspect manufacturing facilities to verify quality control and secure engineering processes.

4.   Labeling: Certified products must display: “This CCTV camera complies with Essential Requirement(s) for Security” on their packaging.

Essential Security Requirements (ER 01:2024)

The Standardisation Testing and Quality Certification (STQC) Directorate validates cameras against Essential Requirements (ER). These are not optional features but mandatory engineering controls: 

·        No Hardcoded Passwords: Each device must have unique credentials; "admin/admin" defaults are prohibited.

·        Secure Boot & Firmware: The camera verifies its own software integrity every time it starts up. Only cryptographically signed firmware can run, so nobody can inject malicious code.

·        Encryption: Mandatory use of TLS 1.2+ for streaming and management data to prevent interception.

·        Physical Security: Requirements for tamper-resistant enclosures and locked physical ports (like UART or JTAG).

·        Data Sovereignty: Prevents sensitive surveillance data from being transmitted to unauthorized foreign servers. Manufacturer debugging interfaces must be shut down before the camera leaves the factory. Open debug ports are one of the most common entry points for hackers.

·        Vulnerability disclosure policy – Brands must maintain a formal process for reporting and patching security flaws. This means ongoing accountability, not just a one-time test.

·        Supply chain transparency – Manufacturers must declare the origin of chipsets, PCBs, and processors. Think of it like ingredient labelling on food; now the government checks where your camera's brain comes from.

Impact of Non-Compliance

Failure to meet these standards results in significant market restrictions:

·        License Cancellation: Existing BIS licenses may be suspended or cancelled.

·        Customs Delays: Imported units lacking certification are often stalled at ports.

·        Tender Disqualification: Non-compliant brands are excluded from lucrative smart city and public infrastructure projects

How to Verify a Specific Model

Certification is awarded at the model level, not just the brand level. You can verify a specific camera by: 

1.   Checking the Packaging: Look for the mandatory text: "This CCTV camera complies with Essential Requirement(s) for Security".

2.   Official Portal: Visit the STQC Certified Products List and search by manufacturer name or certificate number.

Understanding BIS ER Approval

Until recently, a CCTV camera only needed to pass a basic electrical safety test (IS 13252) to be sold in India. That test checked whether the camera was safe to plug in: protection against electric shock, insulation, and fire hazards. That's it.

Alongside STQC, BIS ER (Bureau of Indian Standards – Electronics Registration) approval is another essential regulatory requirement for electronic surveillance equipment sold in India. 

The BIS ER approval indicate strengthens trust among distributors, channel partners, and enterprise buyers who prioritize regulatory compliance during vendor evaluation.

What BIS ER Approval Ensures

·        Conformity to Indian safety standards

·        Electrical safety compliance

·        Product testing through recognized labs

·        Mandatory registration before market sale

Key Aspects of BIS-ER-01 Certification

·        Objective: Adds a mandatory cybersecurity layer to existing electrical safety standards for IP cameras and security equipment.

·        Mandatory Status: Essential for legal sale or import of surveillance products in India.

·        Testing Focus: Evaluates debug interfaces, password complexity, and access controls.

·        Deadline/Timeline: The deadline for implementation was April 9, 2025.

·        Application: Often involves collaboration with BIS-designated labs for testing and submission through official channel

BIS guidelines are listed below to comply with the Essential Requirements for CCTV Cameras. 

While some of it may sound complicated, not to worry, we are here to simplify it for you.  Email us or call us – we are happy to discuss and guide you 

·        Existing licensees of ‘CCTV Cameras’ as per IS 13252 (Part 1) : 2010/ IEC 60950-1 : 2005 

o   Existing licensees of CCTV Cameras shall apply online through the “Apply for Standard Revision/ Amendment/ Essential Requirement” module along with test report for ER: 01.

o   Applicable Fees: 

§  Inclusion test report: INR 30,000/- + applicable taxes per test report 

§  Additional test report: INR 20,000/- + applicable taxes per test report 

o   All non-compliant models shall be deleted from the scope of License and registration shall be liable for cancellation after 09 April 2025.  

·        New Applicants of CCTV Cameras: 

o   Applications for CCTV Cameras may be submitted along with test report for ER: 01 in addition to test report as per IS 13252 (Part 1): 2010. 

o   Processing of Applications without test report for ER: 01 shall be permitted only upto 09 April 2025. 

o   In case of above point no. 3 (B) (ii), a declaration from the applicant will also be required to submit that they will implement the revised Standard by 09 April 2025. 

o   Beyond 09 April 2025, above point no. 3 (B) (ii) will not be valid and registration will not be granted to such applications which are not complying with ER: 01 

·        Change in Scope of License:

o   Inclusion applications for CCTV Cameras may be submitted along with test report for ER: 01 in addition to test report as per IS 13252 (Part 1): 2010. 

o   Processing of Applications without test report for ER: 01 shall be permitted only upto 09 April 2025. 

o   In case of above point no. 3 (C) (ii), a declaration from the applicant will also be required to submit that they will implement the revised Standard by 09 April 2025. 

o   Beyond 09 April 2025, above point no. 3 (C) (ii) will not be valid and registration will not be granted to such applications which are not complying with ER: 01. 

o   Existing Licensees shall not use the Inclusion module to apply for implementation of Essential requirements of registered models. Instead, they may use the module as already mentioned in 3 (A)(i). 

·        Models complying with the above Order may display the following on the packaging: “This CCTV camera complies with Essential Requirement(s) for Security”.  

·        Provision for generating Test Request for ER for Security of CCTV– ER: 01 has been made live on BIS Portal. 

STQC vs BIS ER – Which One Do You Need?
In today’s regulatory environment, certifications are not just about compliance—they’re about trust, credibility, and market access. Two certifications that often create confusion are STQC (Standardisation Testing & Quality Certification) and BIS ER (Bureau of Indian Standards – Essential Requirements). While both deal with product quality and safety, their application areas and target customers differ significantly.

STQC (Standardisation Testing & Quality Certification)
 • Primary Customers: Government departments, PSUs, and organizations working on e-Governance, IT infrastructure, and software/hardware systems.
 • Focus: IT systems, biometric devices, smart cards, e-sign, and other digital infrastructure components.
 • Why It’s Needed: Many government tenders and projects mandate STQC certification to ensure reliability, interoperability, and adherence to national security/quality standards.

BIS-ER ( Bureau of Indian Standards – Essential Requirements)
 • Primary Customers: Private manufacturers, importers, and businesses selling electronic/IT products in the Indian market.
 • Focus: Consumer electronics, IT equipment, household gadgets, and other electronic products listed under the Compulsory Registration Scheme (CRS).
 • Why It’s Needed: BIS ER is mandatory for commercial sale in India—without it, businesses cannot legally sell or market their products.

In simple terms
 • Government Projects
STQC Certification (trust + compliance in IT/e-governance ecosystem).
 • Market Access (Retail/Commercial)
BIS ER Certification (legally required for selling electronic products in India).

From Today onwards (April 1, 2026): what changes

The government gave the industry time to prepare. New BIS licences without ER-01 compliance stopped being issued from April 9, 2025. Brands that didn't get certified could sell existing warehouse stock for a while, but that grace period is now over.

From April 1, 2026, selling a non-compliant camera in India carries fines of up to 10× the product's value and up to 2 years in prison. BIS is already raiding warehouses.

Existing cameras already installed in your home or office are unaffected. The rule targets new sales, not existing use. And analog cameras are exempt; this applies only to IP (network-connected) cameras.