Install Kalytera VMS

Windows Setup, KalyteraVMS.Setup.exe, accompanies your project and includes the runtime. Check System requirements; have a Windows administrator account ready.

Linux servers

Linux arrives with your project as a package, for Ubuntu Server 24.04 LTS first: the same Management, Site Node, PostgreSQL roles and TCP/UDP 7443 ports. The following steps cover Windows Setup.

Choose a machine profile

Profile	Installs	Use it for
Standalone (default)	Management and one local Site Node	Complete single-server system
Management	Management services and database connection	Central server for multiple recording servers
Site Node	Recording and device services	Each additional recording server

Management hosts the web application, users, rules and alarms, relaying live video to browsers. Site Nodes connect to cameras and devices and record video; Standalone registers its local node automatically.

Run Setup

1. Run KalyteraVMS.Setup.exe as administrator; allow changes.
2. Terms: read the Kalytera Terms of service, select I have read and accept the Terms of service, then Continue.
3. Profile: select the Machine profile.
4. Database (Standalone and Management): keep Bundled PostgreSQL (recommended), or select External PostgreSQL, enter the Server, Port, Database, Installation username, and Password, and select Verify connection.
5. Management access: choose Only this computer or, for other computers, Local network (HTTPS; opens TCP and UDP 7443).
6. Site Node SMTP: camera-alert email initially listens locally on port 2525. For cameras or recorders, select Local network and a listen address.
7. Select Review, check, then Install.

Success requires configured services and passing health checks. After failure, rerun Setup: Resume setup.

What Setup installs

Components depend on profile:

Component	Details
KalyteraVMS Management	Windows web-application service; automatic delayed start.
KalyteraVMS Site Node	Windows service for cameras, devices and recording; automatic delayed start.
KalyteraVMS PostgreSQL 18	Bundled database Windows service; local access only.
KalyteraVMS System Manager	Local status and maintenance notification-area app; starts at Windows sign-in.

Programs: C:\Program Files\KalyteraVMS; data: C:\ProgramData\KalyteraVMS. Services use separate virtual service accounts and restart after failure.

Open the firewall

Local network adds Windows Defender Firewall rules in group KalyteraVMS, allowing TCP 7443 and UDP 7443 from directly connected subnets:

• TCP 7443: web application and Site Node connections.
• UDP 7443: live video to browsers.

For other subnets, VLANs or VPNs, add separate rules allowing TCP/UDP 7443 from those networks. Never edit Setup’s KalyteraVMS rules: Repair then fails.

Site Nodes connect outward; recording servers need inbound access only for the optional email receiver.

Open Kalytera VMS

Locally, select System Manager’s Open Management or visit https://localhost:7443. Remotely, use https://, the management computer name, fully qualified domain name or configured LAN address, then :7443.

Certificates and HTTPS

Setup’s certificate covers the machine name, fully qualified domain name, and every configured LAN address. Browser warnings remain until the operator’s computer trusts it. Administrators can import their own certificate.

HTTPS is default. HTTP remains available with a warning: passwords, sessions and video can be read or altered in transit. Camera passwords still require HTTPS or a browser on the server.

Create the first administrator

New installations open Create the administrator:

1. Enter the Administrator user name: 3 to 128 letters, digits, dots, dashes, underscores, or @ signs.
2. Enter and confirm a Password of 12 to 256 characters.
3. Select Create administrator to sign in immediately.

Choose where to store recordings

Site Nodes never choose recording storage automatically. After administrator creation, Choose where to store recordings starts recording on your chosen drive or folder:

• Drives shows local fixed drives and free space; Recommended identifies the suggestion. Select Use this drive.
• Alternatively, select Use a folder on this Site Node…, enter Folder path, then Use this folder. Windows requires a nonexistent folder.

A Windows Site Node can also record to a network share folder, such as \\server\share\folder, once its sign-in is stored under Network share sign-ins. Choose later defers to Configure > System > Recording storage.

Add recording servers

Install additional recording servers with profile Site Node; register each from that server:

1. In System Manager, Complete Node Setup opens Node Setup, usable only locally.
2. Management address: https://, Management’s Windows computer name, :7443. Keep HTTPS.
3. If untrusted, import Management’s certificate into this computer’s certificate store, then select it under Advanced > Management server certificate.
4. Enter Kalytera username and Kalytera password for an account permitted to register nodes (such as the first administrator); select Register Site Node.

For unattended Windows Site Node installation, open Configure > System > Enrollment > Create authorization. Enter the Windows computer name and expiry (5 minutes–24 hours). Save the once-shown enrollment secret immediately. Setup accepts it only through commands, never its window: protect-enrollment-credential, then install --accept-terms --profile site-node --enrollment-mode protected with authorization details.

Maintain the installation

Each server’s notification-area System Manager shows Management, Site Node and database service status; starts, stops and restarts them; and opens the support folder.

• Repair, update or remove… opens the installed version’s maintenance Setup: Repair or update or Remove product (keep data). Removal preserves database, keys, recordings and installation identity.
• Update with newer KalyteraVMS.Setup.exe or System Manager’s Import signed update…. Setup never downgrades.

Next, see First steps.