HikVision event emails and Microsoft Modern Authentication

[George-H]

Hi,

Anyone have any idea about the impact on sending SMTP event notification emails via Outlook.com when Microsoft switch off basic authentication on 16th September 2024 (this year!)?

Does the email client in HikVision cameras and NVRs support Microsoft's "modern authentication"?

I use Outlook.com accounts for sending email notifications using SMTP and those accounts are receiving warnings from Microsoft about this:

It could be a major pain in the behind if not.

 

[codlord]

Most online email systems nowadays (well Google and Microsoft anyway) now require you to configure 2 factor authentication on your account and then allow you to configure "app passwords" for things like this. So you go to your account and generate a unique password just for your NVR which you can then use for IMAP/SMTP etc.

Another possible alternative may be to configure an Outlook "connector". I really don't know much about this only that when I had some monitoring scripts which I wanted to send emails FROM a work Outlook address via sendmail our IT department configured an Outlook connector to allow sendmail to do that.

 

[George-H]

Most online email systems nowadays (well Google and Microsoft anyway) now require you to configure 2 factor authentication on your account and then allow you to configure "app passwords" for things like this. So you go to your account and generate a unique password just for your NVR which you can then use for IMAP/SMTP etc.

Another possible alternative may be to configure an Outlook "connector". I really don't know much about this only that when I had some monitoring scripts which I wanted to send emails FROM a work Outlook address via sendmail our IT department configured an Outlook connector to allow sendmail to do that.

Thanks for the suggestion.

However, I don't think that is the same as "modern authentication". Microsoft aren't awfully clear, but as far as I can tell, "basic authentication" is just your basic username and password. In the bits I have found about "modern authentication" they talk about stuff such as "OAuth":

Deprecation of Basic authentication in Exchange Online

I guess we'll see for certain if after the 16th September lots of CCTV kit stops being able to send email notifications via SMTP.

I've just spotted this in the Microsoft item I posted the link to above:

I guess that kills the idea of "app passwords" being a solution.

 

[ChukkieG]

The 16th of September has come and gone and I no longer receive email notification from my ANPR blacklist. When testing it says Authentification Failed. Are there any suggestions on how to work around this yet? Ideally it wouldn't be with an email notification it would be a native push notification within the app like the motion detection ones.

 

[George-H]

The 16th of September has come and gone and I no longer receive email notification from my ANPR blacklist. When testing it says Authentification Failed. Are there any suggestions on how to work around this yet? Ideally it wouldn't be with an email notification it would be a native push notification within the app like the motion detection ones.

As a precaution I switched all of my CCTV stuff over to sending via GMail accounts using an app password just prior to the 16th. Although Google have made it harder to find the page to set app passwords, but it is still there. Also you only need one which you can use on all CCTV equipment sending emails - just use the same GMail account and app password with all of them. No need to set up one for each device.

You do need to enable 2 factor authentication first though on GMail. I use the Google Authenticator app for that.

All my notifications have continued to be sent ok via GMail.

Oddly, other stuff I have sending via Outlook.com which I expected to fail, such as APC UPS notifications, are still working.

You don't say which equipment you have and if you've checked for any firmware updates - just in case....

 

[ChukkieG]

Thanks @George-H That's worked for now!!