ONVIF Releases New Security Add-on for Encrypted Devices
The modular 2.0 update allows for faster, independent encryption standard adjustments across global security hardware.
Updated on Oct. 15, 2026 in Cybersecurity
Live Poll
Do you believe mandatory cyber security standards make your connected devices more secure?
ONVIF has released a release candidate for the TLS Configuration Add-on 2.0 to standardize encrypted communication between video management systems and security devices. The organization also introduced a release candidate for the Profile V Security Add-on, which defines authentication and authorization protocols for cloud-based connections.
Why it matters
The modular add-on approach allows ONVIF to update security requirements and address evolving cyber threats without waiting for full profile development cycles. This ensures interoperability standards can keep pace with current security best practices across diverse multi-vendor systems.
The TLS Configuration Add-on 2.0 provides a standardized method for configuring encrypted communication, building upon version 1.0 capabilities. It introduces specific version handling to ensure compatibility across disparate manufacturer hardware.
The players
ONVIF
An industry forum that develops and promotes global standardization for IP-based physical security products and interoperability.
The details
The add-on provides a universal framework for securing communications between video management software and network hardware, mitigating the complexities of disparate vendor implementations. By requiring products to first conform to a base ONVIF profile, the system ensures that security enhancements do not break core interoperability. The Profile V Security Add-on further extends this by formalizing authentication and authorization schemas, which are critical for maintaining secure cloud connections.
Timeline
October 15, 2026: ONVIF released the TLS Configuration Add-on 2.0.
The Tech Race
This move signals a shift in how interoperability bodies manage security, moving away from rigid, multi-year cycles. By decoupling security updates from general feature profiles, ONVIF is attempting to keep its ecosystem compliant with rapidly changing cybersecurity requirements.
Security installers and system integrators will eventually see these requirements applied to hardware from multiple vendors to maintain encrypted, cloud-ready streams. Device manufacturers must ensure their products meet base profile requirements before implementing these add-ons to claim full conformance.
The takeaway
The move to modular security add-ons indicates a long-term strategy to keep physical security hardware secure in cloud environments without waiting for major industry overhauls. Stakeholders should track the official finalization of these release candidates as a signal to update their security configuration workflows.
Further reading
For more on industry-wide security standards, explore the latest updates in Cybersecurity.
Source note: This article includes information reported by SecurityWorldMarket.
Live Poll
Do you believe mandatory cyber security standards make your connected devices more secure?
