Using HyperDeck Setup

Blackmagic HyperDeck Setup is used to change settings and update the internal software in your HyperDeck.

To use HyperDeck Setup:

1. Connect HyperDeck to your computer via USB or Ethernet.

2. Launch HyperDeck Setup. Your HyperDeck model will be named in the setup utility home page.

3. Click on the circular ‘setup’ icon or the image of your HyperDeck to open the setup page.

Setup

If you have more than one HyperDeck Extreme, you may wish to give each unit a discrete name to make them easy to identify. You can do this by entering a new name into the name field and clicking the ‘set’ button. It’s worth noting that changing the name of the HyperDeck will invalidate any digital certificates in use, so it’s worth changing the name before generating a certificate signing request or self signed certificate.

Identify HyperDeck

Clicking the checkbox will make the remote button on the front of your HyperDeck Extreme flash. This can be useful when you have more than one HyperDeck Extreme and you want to identify which one you are connected to via the HyperDeck Setup utility.

Date and Time

Set your date and time automatically by ticking the box. When setting the date and time automatically, your HyperDeck Extreme will use the network time protocol server set in the NTP field. The default NTP server is time.cloudflare.com, but you can also manually enter an alternate NTP server and then click on ‘set’.

If you are entering your date and time manually, use the fields to enter your date, time and time zone. Setting the date and time correctly ensures your recordings have the same time and date information as your network and also prevents conflicts that can occur with some network storage systems.

Network Settings

Protocol

To use your HyperDeck Extreme with ATEM switchers, or to control it remotely via HyperDeck Ethernet Protocol, the HyperDeck Extreme needs be on the same network as your other equipment using DHCP or by manually adding a fixed IP address.

Network Access

HyperDeck Extreme HDR can be accessed via a network for file transfer and remote control via HyperDeck Ethernet Protocol. Access will be enabled by default, but you can choose to disable access individually or enable access via a username and password for added security when using the web media manager or HyperDeck Ethernet Protocol.

File Transfer Protocol

Enable or disable access via FTP using the check box. If you are supplying access via an FTP client such as CyberDuck, click the icon to copy the FTP address. For more information, refer to the section ‘transferring files over a network’.

Web Media Manager

Media recorded on CFast cards or external disks can be accessed via a web browser using the web media manager. When you click on the link or copy and paste it into your web browser a simple interface will open where you can upload or download files directly to the CFast cards or external drives over your network.

Access is enabled via HTTP by default but you can disable access entirely or require a secure certificate using the ‘enabled with security only’ option. When using a digital certificate, connections to web media manager are encrypted via HTTPS. More information on digital certificates is available in the ‘secure certificate’ section.

HyperDeck Ethernet Protocol

You can connect to your HyperDeck disk recorder using the HyperDeck Ethernet Protocol and a command line program on your computer, such as Terminal on a Mac and PuTTY on a Windows computer. Access can be enabled with or without a username and password, or disabled entirely. You can use an SSL program to encrypt your session when using a utility program such as netcat. For more information on the available commands, refer to the ‘developer information’ section in this manual.

Allow Utility Administration

Blackmagic HyperDeck Setup can be accessed when your disk recorder is connected via the network or via USB. To prevent users having access via the network, select ‘via USB’.

Secure Login Settings

If you have selected ‘enabled with security’ for HyperDeck Ethernet Protocol access you will need to enter a username and password. Type a username and password and click ‘save’. The password field will appear empty once a password is entered. Once a username and password is set, you will need to enter it when accessing the web media manager if ‘enabled with security’ is selected.

Secure Certificate

To enable web media manager access via HTTPS, or when HyperDeck Ethernet protocol has been configured to the security only option, you will require a secure certificate. This digital certificate acts as an identification card for your HyperDeck Extreme so that any incoming connections can confirm they are connecting to the correct unit. Along with confirming the identity of the unit, using a secure certificate ensures data transmitted between HyperDeck Extreme and a computer or server will be encrypted. When using the secure login settings the connection will not only be encrypted but require authentication for access.

There are two certificate types you can use with HyperDeck Extreme, a secure certificate signed by a certificate authority, or a self signed certificate. A self signed certificate may be secure enough for some user workflows, for instance only accessing the HyperDeck Extreme via a local network.

To generate a self signed certificate click on ‘create certificate’. You will be prompted to confirm you understand the risks with using a self signed certificate. Once you click on ‘create’, the certificate details will autofill the ‘domain’, ‘issuer’ and ‘valid until’ fields in the HyperDeck Setup utility.

Following a factory reset any current certificate will be deleted, but you can also remove it at any time by clicking on the ‘remove’ button and following the prompts.

When using a self signed certificate to access media files using HTTPS, your web browser will alert you to the risks of accessing the site. Some browsers will allow you to proceed once you confirm you understand the risks, however other web browsers may prevent you from proceeding at all.

To ensure access is granted to any web browser, you will need to use a signed certificate. To obtain a signed certificate, you first need to generate a certificate signing request, or CSR, using Blackmagic HyperDeck Setup utility. This signing request is then sent to a certificate authority, also known as a CA, or your IT department to be signed. Once completed, a signed certificate with a .cert, .crt or .pem file extension will be returned which you can import into your HyperDeck Extreme.

To generate the certificate signing request CSR:

1. Click on the ‘generate signing request’ button.

2. A window will appear prompting you to enter a common name and subject alternative name for the HyperDeck. Adjust any other details as required using the table below.

   Information	Description	Example
   Common Name	The domain name you will use	hyperdeck.melbourne.com
   Subject Alternative Name	An alternate domain name	hyperdeck.melbourne.net
   Country	Country for your organization	AU
   State	Province, region, county or state	Victoria
   Location	Town, city, village etc. name	Port Melbourne
   Organization Name	Name of your organization	Blackmagic Design

3. Once you have filled in the certificate details, press ‘generate’.

When you generate a .csr you will also be creating a public key and private key at the same time. The public key will be included with the signing request while the private key will remain with the unit. Once the CA or IT department have verified the information in the CSR with your organization, they will generate a signed certificate with the above details along with your public key.

Once imported, the HyperDeck Extreme will use the public and private key to confirm the identity of the HyperDeck and to encrypt and decrypt data share via HTTPS or via HyperDeck Ethernet Protocol when using an SSL program.

Importing a signed certificate:

1. Click on ‘import signed certificate’.

2. Navigate to the location of the signed certificate using the file browser and once the file is selected click on ‘open’.

The domain, issuer and valid until fields will update with the information from your CA. Generally, a signed certificate will be valid for about a year so the process will need to be repeated as you reach the expiration date.

Since a domain name was selected, you will need to speak to your IT department about resolving the DNS entry for the HyperDeck Extreme unit. This will point all traffic for the IP address of the HyperDeck Extreme to the selected domain address in the signing request. This will also be the HTTPS address you use to access files via the web media manager, for example https://hyperdeckextreme.melbourne

It’s worth noting that the certificate will be invalidated following a factory reset and a new certificate will need to be generated and signed.

File Settings

When first set up, your HyperDeck Extreme will record clips using ‘HyperDeck’ as the prefix. Type in a new filename to change the prefix.

The timestamp added to the filename is turned off by default. If you would like the date and time recorded in your filename, switch it to on. Filename prefix and timestamp settings are also available via the touchscreen menu on HyperDeck Extreme HDR.

Reset

Select ‘factory reset’ to restore your HyperDeck to factory settings. A factory reset will invalidate the current certificate. If a secure certificate is being used you will need to generate a new certificate signing request to be signed by a certificate authority or IT department.

Updating the Internal Software

To update the internal software:

1. Download the newest Blackmagic HyperDeck Setup installer from www.blackmagicdesign.com/support.

2. Run the Blackmagic HyperDeck Setup installer on your computer and follow the onscreen instructions.

3. After installation is complete, connect your HyperDeck Extreme to the computer via the USB or Ethernet connector on the rear panel.

4. Launch Blackmagic HyperDeck Setup and follow any onscreen prompt to update the internal software. If no prompt appears, the internal software is up to date and there is nothing further you need to do.