ITVDesk 11.0 expands ONVIF integration with HTTPS certificate management, recording job control, recorded audio replay, event notification streaming, and per-channel Application Monitoring.
Release highlights
- ONVIF certificate management lets compatible NVR/VMS clients create certificates, generate signing requests, and upload or replace HTTPS server certificates.
- ONVIF HDD recording and audio replay add AAC audio to new recordings from configured Audio IN device sources and ONVIF control of recording jobs.
- ONVIF Notification Streaming and multicast control extend event integration and IPv4 RTP multicast operation for compatible NVR/VMS clients.
- Application Monitoring adds optional per-channel application events, visible-window alerts, and allowed-application monitoring through existing Motion events and video OSD.
- Desktop PTZ AbsoluteMove adds normalized cursor positioning while retaining existing relative movement and mouse-click mappings.
Improvements
- More reliable HTTP/HTTPS services, tunneled streams, audio backchannel changes, and ONVIF event delivery.
- Improved Media1/Media2 profiles, recording and replay, snapshots, discovery, and stream resource handling.
- Clearer license request exports and offline license generator workflows, with existing offline licenses supported and online activation unchanged.
ITVDesk 11.0 update overview
Version 11.0.0 (Build 7.7.11.2) - Released on October 17, 2026
New Features
- Added ONVIF SSL/TLS certificate management for HTTPS connections.
Compatible NVR/VMS clients can create self-signed certificates, generate certificate signing requests (CSR) for a certificate authority, and upload, assign or replace server certificates during operation.
- Added AAC audio alongside video in new MP4 HDD recordings from configured Audio IN device sources.
Compatible NVR/VMS clients can replay recorded sound through ONVIF Replay without changing the live stream or backchannel codec. Audio and video share a recording clock; an audio track (AUDIO001) is advertised only after audio has actually been written. Existing video-only recordings are retained without adding synthetic audio.
- Added ONVIF control of HDD recording jobs for existing ITVDesk camera profiles, including external IP cameras already configured in ITVDesk.
Compatible NVR/VMS clients can create or activate a recording job to start recording, and change its configuration to control the recorder. Stopping or deleting a job stops the recording it started unless another active job still needs it. Recordings started through the ITVDesk UI are preserved, and job status distinguishes active and idle jobs on the same profile.
- Added ONVIF Notification Streaming for Alarm IN, Motion, Relay Output and other supported events through a separate RTSP metadata stream.
Compatible NVR/VMS clients receive the original event source, time and data for their alarm and recording rules. Clients can filter topics using a profile with a video source and metadata configuration; an additional video/audio stream or encoder is not required.
- Extended IPv4 RTP multicast streaming with ONVIF Media1/Media2 Start/Stop control.
Compatible NVR/VMS clients can start a stream to a configured multicast group and RTP port with the selected TTL. Multiple receivers can share one multicast stream, reducing outgoing traffic compared with a separate stream for every viewer.
Use Enable RTP Multicast Streaming on a LAN that supports multicast. The option is disabled by default for new configurations; saved preferences are retained. A sender starts only after StartMulticastStreaming and stops through StopMulticastStreaming, relevant configuration changes or camera/service shutdown.
After a camera/application restart, an explicit ONVIF multicast stream requires a new Start request. Automatic restart and IPv6 multicast are not included.
- Added optional Application Monitoring per channel for selected application events, visible-window alerts and time outside an allowed application list.
Events connect to the existing ONVIF Motion mechanism and video OSD, with protected local history and shared Main/Sub/P2P settings for the same channel.
- Added desktop cursor AbsoluteMove with normalized PanTilt position reporting in ONVIF PTZ status and presets.
Existing relative/continuous cursor movement and mouse-click mappings are retained. Desktop PTZ no longer advertises unsupported absolute zoom spaces, defaults or limits; invalid positions, unsupported zoom/position spaces and invalid PanTilt speeds are rejected before moving the cursor.
Stop, Home, presets, movement timeouts and external-camera PTZ capabilities retain their existing behavior and saved configuration format.
Improvements
- Updated the ONVIF Device service version and supported-version reporting to 25.12, retaining previously advertised versions for older clients.
- Improved HTTP/HTTPS port handling: each protocol keeps its own port, even when disabled.
ONVIF port changes update the listening service correctly. Changes to both active ports are rejected together if either port is unavailable, preserving the previous settings, existing TLS context and established connections.
- Improved Web Management status reporting to show whether HTTP and HTTPS services are enabled and running.
- Improved RTSP-over-HTTP/HTTPS reliability for compatible NVR/VMS video and audio connections.
Tunneled stream control commands are correctly reassembled when network data arrives in smaller pieces or includes line breaks. This prevents fragmented transfers from corrupting session setup, start or close requests and causing request timeouts. Existing stream addresses and connection settings are retained; no additional configuration is required.
- Audio backchannel activation and changes to its format or Follow camera Audio IN format option now apply without restarting ITVDesk.
Affected RTSP sessions are refreshed so compatible NVR/VMS clients can reconnect with the new capabilities. Format and Follow changes refresh only backchannel client sessions; ordinary streams and internal HDD recording sessions are excluded.
Video sharing the same RTSP session briefly reconnects too. Automatic reconnection depends on the client, and some clients may require Talk to be enabled again.
- New installations keep audio backchannel disabled, with G711U at 8000 Hz, Mono, and Follow camera Audio IN format disabled as the initial manual settings.
Format defaults are initialized before saved settings are loaded. Existing formats, disabled settings and the Follow behavior of older configurations without an explicit Follow setting are retained.
- Clarified audio backchannel settings: G.711/G.726 manual selections offer 8000 Hz and Mono, while AAC choices are retained.
Help text explains manual/Audio IN format selection and when client-created backchannel profiles use their attached AudioDecoder configuration.
- Improved ONVIF push event delivery so slow or unreachable notification consumers no longer delay subscription renewal or other ONVIF requests.
Background delivery starts only when requested and waits when idle. A bounded queue preserves notification order for each subscription, removes pending messages when it ends, and reports delivery failures in the local log.
- Improved ONVIF PullPoint responsiveness by delivering queued events without waiting for the next one-second timer tick.
Clients also receive the current state of existing recording jobs matching their filters when subscribing or requesting a status refresh. Initial and later notifications use consistent job information, while message limits, filters and remaining queued events are retained.
- Improved initial Alarm IN and Relay Output reporting for compatible ONVIF clients.
Push subscribers immediately receive the current states matching their filters, including both types when requested; initialization is sent only to the new subscriber. PullPoint subscriptions also receive the current logical state and properties of each matching relay without requiring an earlier GetRelayOutputs call.
Alarm IN reporting includes inactive inputs and configurations without Security Monitor alarm forwarding. Existing alarm triggers, relay commands, timers and simulation settings are retained.
- Improved Motion status reporting when ONVIF clients subscribe or request a status refresh, without waiting for the next motion trigger.
Main and Sub streams of the same video source share the same alarm state. Existing motion settings and triggers are retained.
- Improved recording job track reporting so NVR/VMS clients consistently identify video, audio and metadata in configurations, status replies and events.
New HDD recording jobs include video and metadata tracks; audio is added only after it has been written. Older local jobs with repeated default track identifiers are corrected when loaded, preserving recording data and valid client-defined mappings. MP4 encoding and recording controls are retained.
- Improved recording job priority handling: when an NVR/VMS stops or deletes a higher-priority local job, the next eligible job for that recording resumes automatically.
Jobs explicitly set to Idle stay stopped, and notifications identify the job that is actually active.
- Improved HDD recording and live-view ownership during replay and manual/POS recording stop.
Active recording continues when replay uses the same profile. Stopping a recording releases its recorder and audio capture resources while live viewers retain their own capture access.
- Improved Windows WS-Discovery on systems with multiple network interfaces.
Hello/Bye announcements and multicast ProbeMatches replies use the configured camera IPv4 interface, with coordinated interface selection and sending on the shared socket. Multicast loopback is enabled and send results are logged; unicast replies and existing message contents are retained.
- Aligned ONVIF/UI discovery settings across camera restart and configuration save/load.
New or unconfigured cameras default to Discoverable; explicit Discoverable or NonDiscoverable selections are retained, and Hello/Bye respect NonDiscoverable. The SystemReboot Hello announcement is now sent after camera startup and HTTP/HTTPS availability checks, rather than when restart is first queued.
- Improved desktop PTZ operation for client-created profiles with the configured desktop video source and PTZ bindings, allowing commands without opening a media stream.
One-shot zoom-to-click commands report IDLE when finished. Movement and Home requests check the owning profile's current PTZ enable/advertise policy, retaining existing click, movement and timeout behavior.
- Aligned ONVIF Media1/Media2, Add/Edit Camera and Video stream settings around a 1920x1080 limit for new JPEG resolution selections, including manual entry.
Higher requests are rejected before changing camera settings. Existing saved JPEG resolutions remain visible and can be retained; opening settings does not reduce them. Resolution choices for other codecs are retained.
- Improved image-dimension reporting for high-resolution MJPEG streams, including 4K, to compatible ONVIF clients without additional configuration.
- Improved license request exports and identification fields.
Encrypted .req files contain one PC diagnostics section, the short hashed computer-name label and the original computer name. The label is hidden by default and can be shown for copying. Support ID, serial number, camera password and P2P verification code fields use consistent, more visible show/hide icons. Existing offline licenses remain supported, and online activation is unchanged.
- Improved the offline license generator's Manual details workflow.
A current ITVDesk Support ID and hashed computer name can be entered without a .req export, with licenses saved as readable JSON in .lic files. Existing request-file and batch imports retain their selected file format.
- Offline licenses now keep crash report sending and confirmation options disabled, including after switching from an online license. Local crash dump capture remains available.
- Corrected certificate signing requests, CA certificate uploads and HTTPS certificate replacement.
New ONVIF keys advertise 2048-bit RSA support. CA uploads retain their public keys without incorrectly requiring private keys or reporting a full keystore, and server certificate replacement includes the supplied CA chain.
Existing TLS settings and established connections are preserved. Reconnecting HTTPS clients use the new certificate identity rather than a previously cached TLS session identity.
- Corrected Media1 dynamic profile creation and source attachment for NVR/VMS configuration.
CreateProfile returns an empty dynamic profile, and adding a video source no longer implicitly attaches an encoder that prevents later source removal. Media setup is deferred until a stream URI or snapshot is requested, retaining explicitly selected configurations and the existing fallback for source-only VMS profiles.
Automatic VMS setup remains available for untouched profiles; existing profile cloning and source handling are retained without an additional compatibility switch.
- Corrected Media2 dynamic profile mapping and stream setup for newly created video and audio profiles.
Profiles use their own stream URI instead of borrowing the first profile's address, including when a source template's encoder is temporarily detached. Updated URI formatting and configuration handling prevent invalid stream addresses and misleading channel-mapping messages when local recording starts.
- Preserved detached ONVIF video sources, source configurations, Metadata, PTZ, Analytics and OSD entries during camera enumeration.
Clients can reattach these configurations later, including after streaming tests. Cleanup remains limited to explicit channel removal; refreshing the camera list no longer removes detached configurations.
- Improved stability while ONVIF clients temporarily remove/restore video sources or delete a profile during streaming.
Camera-list refresh retains configurations already in use, temporarily empty profiles no longer produce repeated errors, and stream cleanup finishes before a deleted profile is released.
- Corrected Media2 GetVideoEncoderInstances counts for the requested video source.
Shared encoders count once and metadata-only profiles do not increase the count, preserving existing streaming and recording behavior.
- Corrected PTZ service and profile reporting for compatible ONVIF clients.
HTTPS GetServices includes PTZ when supported and enabled on a profile, allowing discovery for metadata streaming. Media1/Media2 profile replies retain explicitly attached PTZ configurations even when the local PTZ runtime flag is disabled; existing PTZ operation controls still apply.
- Corrected ONVIF capability and configuration reporting.
GetServices with IncludeCapability uses the correct Device service capabilities container, retaining capability values and the separate GetServiceCapabilities response. Video source bounds follow the actual loaded dimensions instead of the default 1280x720 range, and configuration usage counts and profile capacity are reported consistently.
- Corrected Media1/Media2 forward audio encoder options and Audio IN bitrate saving.
G.711 advertises 64 kbit/s at 8 kHz; G.726 offers 16/24/32/40 kbit/s at 8 kHz. Unsupported combinations are rejected before configuration changes, preventing invalid G726-64 stream descriptions.
- Fixed AAC selection through ONVIF Media2 and improved audio-only stream setup when clients reuse existing audio sources.
Audio settings remain stable when an encoder is temporarily detached or no profile is selected, and reported settings match the selected format.
- Corrected backchannel setup for client-created profiles with AudioOutput and AudioDecoder configurations but no forward video/audio encoders, including profiles that carry metadata.
The receiver follows the attached decoder's PCMU, G.726 or AAC selection, with matching SDP and decoding; an attached G.711 decoder selects the advertised PCMU instead of retaining PCMA. AAC uses MP4A-LATM reception through UDP, RTSP/TCP and HTTP tunneling.
Decoder bitrate/sample-rate options are aligned between Media1 and Media2. These profiles reuse the enabled backchannel receiver without extra capture, while ordinary forward-stream profiles retain their configured backchannel format.
- Corrected Media2 JPEG configuration and profile replies so codec profile, GOP and anchor-distance settings from a previously selected codec are not reported for JPEG. Stored settings, encoder behavior and other codec responses are retained.
- Corrected H.264/MPEG4 GOP saving through ONVIF Media1 and the UI.
Stored H.264/H.265/MPEG4 configurations with missing or non-positive GOP values use the existing default of 30. The GOV slider starts at 1; JPEG settings and existing encoder behavior are retained.
- Fixed OSD and encoder instability when source or imaging settings are temporarily unavailable, including during drawtext initialization and streaming.
Added validation of video rotation/effects and safer handling of incomplete text and non-ASCII characters. This prevents Windows debug-build character-processing assertions in OSD text and RTSP request processing while retaining normal ASCII and overlay behavior.
- Fixed ONVIF Media1/Media2 snapshots block above the previous 200 KB JPEG limit.
The request buffer grows once as needed, up to 16 MB. Truncated cached-image paths and failed file reads are handled safely, retaining existing access controls, asynchronous refresh, fallback images and capture/encoder behavior.
- Corrected ONVIF recording search filters and pagination.
Audio and combined Video/Audio filters return only recordings with the requested tracks. MaxMatches limits the search and MaxResults limits each response, counting matching recordings without repeated results across pages. Search status indicates remaining pages; pending results are released when the search ends or expires. Unfiltered searches retain their existing results.
- Corrected event and PTZ search timing for recordings with different track time ranges.
Video, audio and metadata states stay within their track's time bounds, including late-starting or shorter audio. Boundary states keep the requested search boundary time and indicate whether data is present, preventing missing states during backward searches. Forward and backward results remain ordered, and fractional-second PTZ position searches respect the requested interval and recording range.
- Fixed ONVIF Replay session control at end of file and after seeking or pausing.
Clients can issue another PLAY or TEARDOWN using the existing authenticated session. Clock ranges map to file-relative seeks, keyframes are preserved after seeking, and PAUSE/PLAY retains the playback range while excluding paused time from the replay clock. Completed recordings are not automatically repeated.
- Corrected replay media reporting to use the recorded video codec, dimensions and frame cadence instead of the current live profile.
Recorded AAC playback uses the file's codec, sample rate, channels and AudioSpecificConfig. Audio RTP-Info timestamps identify the first transmitted replay packet, and media attributes retain the actual audio track time bounds.
- Corrected ONVIF Replay URIs for saved audio-device suffix variants, resolving them against the owning camera's current profile.
HTTP/HTTPS replay addresses retain the camera/profile path and configured endpoint, with existing authentication and recording lookup.
- Corrected ONVIF multicast startup and RTP/RTCP port allocation.
Source, sockets and sender initialization complete before success is returned; invalid settings or failed startup return an ONVIF fault. Multicast destination ports are separate from sender source ports, avoiding local receiver conflicts while applying the configured destination, TTL and interface.
- Fixed multicast sender ownership, cleanup and capability reporting.
Repeated Start/Stop requests do not create duplicate senders. Stop releases the requested sender while other clients and recording sessions retain their own access. Media1/Media2 capability replies report multicast availability only when Enable RTP Multicast Streaming is enabled, retaining saved preferences and unicast behavior.
- Corrected event capability reporting by temporarily disabling ImageTooBlurry, ImageTooDark, ImageTooBright, GlobalSceneChange and TamperingDetection advertising until detector support is implemented.
Explicit simulation requests for these topics no longer generate events. SignalLoss, Motion, Alarm IN and Relay Output reporting are retained.
- Fixed overlapping application Motion expiry so an expired event does not clear other active event sources.