Secure RTSP Streaming with SRTP and RTSPS – How ITVDesk Keeps Your Video Encrypted

🔒 Secure RTSP Streaming – SRTP / RTSPS

Encrypted video streaming from the camera through the server to the viewers is now essential in modern video surveillance systems. While the connection between the server and the viewer is typically protected using the HTTPS protocol, the link between the IP camera and the server has often remained unencrypted. This article explains how SRTP and RTSPS protocols solve that issue and how they can be configured in ITVDesk.

What is RTSP?

The Real Time Streaming Protocol (RTSP) is used by IP cameras to transport media streams (video and audio) to a recording or streaming server. RTSP itself only encrypts authentication credentials (username and password) via Digest Authentication, while the actual video and audio data are sent over RTP (Real-Time Transport Protocol), which does not offer any encryption. This means that anyone intercepting network traffic could theoretically view or modify the video stream.

What is SRTP?

SRTP (Secure Real-Time Transport Protocol) is an extension of RTP that encrypts video and audio data. It uses the same proven cryptographic algorithms as HTTPS — typically AES-128 encryption — to ensure that media packets cannot be read or tampered with during transmission. Since AES uses a symmetric key, both the camera (video source) and the server (receiver) must share this encryption key to communicate securely.

What is RTSPS?

RTSPS (RTSP over TLS) secures the RTSP control and signaling channel using Transport Layer Security (TLS), the same standard that protects HTTPS communication. When using RTSPS, the camera establishes a TLS session with the server, encrypting both commands and authentication data. This ensures that the stream negotiation, camera credentials, and session setup remain confidential and tamper-proof.

Camera Compatibility

Not all IP cameras support secure streaming. SRTP and RTSPS are typically available on higher-end or enterprise models from manufacturers like Axis, Bosch, Hikvision, and Dahua. However, implementation details vary — especially port numbers and configuration options.

🔧 Bosch Cameras

Bosch cameras use separate ports for non-secure and secure RTSP streaming. To use secure RTSP, the RTSPS option must first be enabled under the camera’s web interface:
Network → Network Services → Enable Secure RTSP

After enabling, the camera provides two types of streams:

⚠️ Note: Bosch cameras require using the rtsps:// prefix when accessing the secure stream, and the secure port (default: 9554) cannot be changed.

🖥️ Using Secure Streaming in ITVDesk

The latest version of ITVDesk now supports both RTSPS and SRTP for end-to-end encrypted communication between your IP camera, the ITVDesk server, and connected viewers or NVRs.

• ✔️ Stream securely using RTSPS (RTSP over TLS)
• ✔️ Enable SRTP for encrypted audio/video media transport
• ✔️ Store camera credentials and configurations securely with AES-based local encryption
• ✔️ Full support for ONVIF Security and Profile T authentication

⚙️ Configuration in ITVDesk

To use secure streaming:

1. Open the RTSP Settings section in ITVDesk.
2. Enable the option “Default RTSPS (TLS Encrypted RTSP)”.
3. The application will automatically switch the stream URLs to the rtsps:// format and use the configured secure port (default: 322).
4. Optionally, enable SRTP support for additional encryption of real-time media.

Once configured, ITVDesk ensures full encryption for video, audio, and control channels — making it suitable for enterprise environments, offices, and high-security installations where data protection is critical.

With RTSPS and SRTP integration, ITVDesk bridges the gap between camera security and reliable streaming — offering the same level of encryption used in banking-grade HTTPS connections.