Install Kalytera VMS

On Windows, Kalytera VMS installs with a single program, KalyteraVMS.Setup.exe, which we deliver with your project. Setup installs everything the system needs, including its runtime. Check the System requirements and have a Windows administrator account ready.

Linux servers

On Linux, with Ubuntu Server 24.04 LTS first, we deliver the installation with your project as a package. It sets up the same Management, Site Node, and PostgreSQL roles as Setup does on Windows and uses the same ports, TCP 7443 and UDP 7443. The rest of this guide describes Setup on Windows.

Choose a machine profile

Profile	Installs	Use it for
Standalone (default)	Management and one local Site Node	A complete system on one server
Management	Management services and the database connection	The central server of a system with several recording servers
Site Node	Recording and device services	Each additional recording server

Management hosts the web application, users, rules, and alarms, and relays live video to browsers. A Site Node connects to cameras and devices and records their video. With Standalone, the local Site Node registers itself during Setup.

Run Setup

1. Run KalyteraVMS.Setup.exe and allow it to make changes. Setup needs administrator rights.
2. Profile: select the Machine profile.
3. Database (Standalone and Management): keep Bundled PostgreSQL (recommended), or select External PostgreSQL, enter the Server, Port, Database, Installation username, and Password, and select Verify connection.
4. Management access: select Only this computer, or Local network (HTTPS; opens TCP 7443) so operators can connect from other computers.
5. Site Node SMTP: the built-in receiver for camera alert emails listens on port 2525 of this computer only. Select Local network and a listen address if cameras or recorders will send email to it.
6. Select Review, check the summary, and select Install.

Setup reports success only after the services are configured and have passed their health checks. If a step fails, run Setup again and select Resume setup.

What Setup installs

Depending on the profile, Setup installs these components:

Component	Details
KalyteraVMS Management	Windows service that hosts the web application. Starts automatically (delayed start).
KalyteraVMS Site Node	Windows service for cameras, devices, and recording. Starts automatically (delayed start).
KalyteraVMS PostgreSQL 18	Windows service for the bundled database, reachable from this computer only.
KalyteraVMS System Manager	Notification-area app for local status and maintenance. Starts when you sign in to Windows.

Programs are installed in C:\Program Files\KalyteraVMS and data is kept in C:\ProgramData\KalyteraVMS. Each service runs under its own virtual service account and restarts after a failure.

Open the firewall

With Local network access, Setup adds Windows Defender Firewall rules in the KalyteraVMS group that allow TCP 7443 and UDP 7443 from the server's directly connected subnet:

• TCP 7443 carries the web application and the Site Node connections.
• UDP 7443 carries live video. Browsers receive live video on this port.

If operators or Site Nodes connect from other subnets, VLANs, or over a VPN, add a firewall rule of your own that allows TCP 7443 and UDP 7443 from those networks. Leave the KalyteraVMS rules as Setup created them, because Repair fails when they have been edited.

Site Nodes only connect outward, so recording servers need no inbound port for Kalytera VMS apart from the optional email receiver.

Open Kalytera VMS

On the management server, select Open Management in KalyteraVMS System Manager, or browse to https://localhost:7443. From other computers, browse to https:// followed by the management server's computer name, its fully qualified domain name, or one of its configured LAN addresses, and :7443.

Certificates and HTTPS

Setup issues a certificate that covers the machine name, its fully qualified domain name, and every configured LAN address, so each of those works in the address bar. Browsers show a certificate warning until that certificate is trusted on the operator's computer. An administrator can import a certificate of your own instead.

Kalytera VMS uses HTTPS by default. HTTP remains available as an explicit choice, and Kalytera VMS then shows a visible warning that passwords, sessions, and video can be read or altered on the way. Entering camera passwords still needs HTTPS or a browser on the server itself.

Create the first administrator

A new installation opens on Create the administrator:

1. Enter the Administrator user name: 3 to 128 letters, digits, dots, dashes, underscores, or @ signs.
2. Enter and confirm a Password of 12 to 256 characters.
3. Select Create administrator. You are signed in straight away.

Add recording servers

Install each additional recording server with the Site Node profile, then register it with Management from that server:

1. In KalyteraVMS System Manager, select Complete Node Setup. The Node Setup page opens; it only works on that computer.
2. Enter the Management address: https://, the management server's Windows computer name, and :7443. Keep HTTPS.
3. If this server does not trust the management server's certificate yet, import the certificate into the computer's certificate store and select it under Advanced > Management server certificate.
4. Enter the Kalytera username and Kalytera password of an account that may register Site Nodes, such as the first administrator, and select Register Site Node.

Setup can also run unattended from the command line. An unattended Site Node registers itself with a one-use authorization created in Configure > System > Node enrollment, valid for 5 minutes to 24 hours.

Maintain the installation

KalyteraVMS System Manager sits in the notification area of each server. It shows the state of the Management, Site Node, and database services, starts, stops, and restarts them, opens the support folder, and imports signed updates. Repair, update or remove… runs Setup for this installation: it repairs the installed version or updates it to a newer one, and never downgrades it.

Next, see First steps.