Media Signing Add-on – Frequently Asked Questions (FAQ)

• General
• For manufacturers
• For system integrators
• For end users
• For legal, law enforcement, insurance and HR teams

 

General

 
What is ONVIF Media Signing Add-on?

The Media Signing Add-on is a standardized method for confirming the authenticity and integrity of surveillance video. It defines an interoperable way for network video devices, such as surveillance cameras, to cryptographically sign encoded video at the point of creation, and for clients, such as video management software, to configure devices for signed video and for a supporting media player to verify the signed video later in the workflow. It enables the video to be traced back to its origin, and each image frame to be checked for whether it has remained unaltered. It is currently at the Release Candidate stage, and ONVIF expects to release the final specification at the end of 2026.

 
Why does the Media Signing Add-on matter?

Surveillance video is one of the most crucial pieces of evidence used in criminal investigations, court proceedings, and internal corporate investigations, and it matters most when it is relied upon after an incident. Generative AI has made manipulated or “deepfake” video far easier to produce, even with everyday apps. Some manipulations are obvious, but others are seamless to the viewer, such as changing a clip’s timestamp to a different day or time, removing specific frames to erase a person or event, or substituting one person’s face for another. The Media Signing Add-on gives those who depend on surveillance footage a standardized way to confirm where signed video originated and whether it remains unaltered since it was created.

 
What is the difference between authenticity and integrity?

Authenticity validates the video’s source, while integrity verifies that the video has remained unaltered since the moment of capture. The Media Signing Add-on addresses both.

 
How does Media Signing work at a high level?

A device, such as an IP camera or video encoder that is conformant to the Media Signing Add-on, adds cryptographic signing information to the encoded video stream at the point of creation, using a media signing key associated with the device. The signing information is tied to each image frame and to the signing device. Later in the workflow, a media player or verification tool that supports the Media Signing Specification checks the signatures and reports whether the video is valid or invalid. It can also trace the video back to its source even after the video has been shared across different platforms and services.

 
Is the add-on finished and available now?

The Release Candidate is available now for ONVIF members to prototype and test. ONVIF expects to finalize the specification at the end of 2026. To claim conformance with the add-on once it is finalized, a product must also conform to an ONVIF profile.

 
How is an add-on different from an ONVIF profile?

Unlike ONVIF profiles, add-ons support version handling and may be updated over time. That lets the Media Signing Add-on evolve — for example, audio support may be added in a future version.

 
For Manufacturers

 
What must a conformant device support?

A conformant device, such as an IP camera, video encoder or other video source, must be able to:

  • be configured by a conformant client to produce signed video
  • add cryptographic signing information to encoded video using a media signing key associated with the device, so clients can verify that signed video has remained unaltered since the moment of signing
  • expose media signing support through video encoder configuration options, along with the capabilities and configuration options that conformant clients require
 
What must a conformant client support?

A conformant client, such as video management software (VMS), a recording system, a forensic analysis tool or a cloud service, must be able to:

  • use video encoder configuration options to determine whether media signing is supported for a usable media profile and encoder configuration
  • configure conformant devices to produce signed video
  • receive signed encoded video streams together with the signing information required for verification
 
What video formats and content does the add-on cover?

The add-on applies to cryptographic signing of live video and is applicable only to encoded H.264 and H.265 video. It currently applies only to live video; audio support may be added in future versions.

 
Do our products still need to conform to an ONVIF profile?

Yes. To claim conformance with the Media Signing Add-on, a product must also conform to an ONVIF profile.

 
How can we prototype the Release Candidate?

Manufacturers can access and integrate the Media Signing feature using the specification found in the ONVIF Media Signing Add-on v1.0 (Release Candidate) specification on the ONVIF Member Portal. See the open-source code, found on the ONVIF GitHub, for help on the integration work.

 
Why has ONVIF also open-sourced the code?

ONVIF has published the framework code for both signing and verification on the ONVIF GitHub. Opening the code to the developer community makes the ONVIF method transparent and easier to implement for camera vendors and client applications alike, while allowing anyone to examine how signing and verification actually work. That transparency in the technical implementation strengthens trust in the authentication process and confidence in the authenticity and integrity of signed video. The combination of open code and easier implementation is expected to help the standard gain wider adoption across the security industry.

 
How can we test the Release Candidate?

ONVIF members can use the ONVIF test tools from the ONVIF Member Portal.

 
For Systems Integrators

 
What does the Media Signing Add-on change for the systems I design and install?

It gives cameras, encoders and video software a standardized, interoperable way to sign and verify video rather than relying on a proprietary, single-vendor approach. Signed video from a conformant device can be recorded and later verified by a media player that supports the Media Signing Specification.

 
Does signed video survive being recorded, exported or shared?

A selected time interval of a signed video file may be copied, stored, transported, packaged or exported without affecting verifiability, provided that the signed encoded video data remains unchanged and the metadata required to verify the exported content is included.

 
How does the signed video workflow look like?

The workflow has five stages:

  1. A conformant device captures and encodes video
  2. It adds cryptographic signing information to the encoded stream
  3. The signed stream is recorded while preserving the metadata
  4. A media player that supports the Media Signing Specification checks the digital signatures
  5. The media player reports whether the video is valid or invalid
 
Does the add-on work alongside the rest of an ONVIF-based system?

Yes. The Media Signing Add-on is used together with an ONVIF profile, and a product must conform to a profile in addition to the add-on. Media signing fits into a broader ONVIF-conformant video system rather than replacing it.

 
For Consultants and Specifiers

 
What does the Media Signing Add-on provide that a proprietary approach does not?

A shared, standards-based method for establishing where video came from and whether it has remained unaltered. Because it is an open standard, investigators, insurers and courts can verify video from different sources using consistent tools and workflow, rather than relying on a single vendor’s proprietary mechanism.

 
How mature is the specification, and what should I tell clients about timing?

The add-on is at the Release Candidate stage. ONVIF members can access the specification and test tools now, and ONVIF expects to release the final specification at the end of 2026.

 
Does specifying the add-on require anything else?

Yes. Conformance to the Media Signing Add-on also requires conformance to an ONVIF profile.

 
For End Users

 
What is the practical benefit of the Media Signing Add-on for my organization?

When surveillance video is relied upon after an incident, in law enforcement casework, corporate and internal investigations, insurance claims or legal proceedings, the add-on lets you confirm where signed video originated and whether it is unaltered since it was created.

 
How does it help counter manipulated or AI-generated video?

It gives the security industry a standardized method to help counter manipulated video and defend authentic content. Because it is an open standard, investigators, insurers and courts can verify video from different sources using consistent tools and workflow.

 
Can I rely on signed video after it has been shared or exported?

A media player or verification tool that supports the Media Signing Specification can confirm whether signed video is valid and trace it to its source, even after the video has been shared across different platforms and services, as long as the signed video data is unchanged and the metadata needed for verification is included.

 
Can I buy Media Signing conformant products today?

The add-on is at the Release Candidate stage, and ONVIF expects to finalize the specification at the end of 2026. A product must also conform to an ONVIF profile to claim conformance with the add-on.

 
Why is video authenticity a growing concern for those who use video as evidence?

Video is one of the most crucial pieces of evidence used in criminal investigations, court proceedings, and internal corporate investigations. As deepfake and video-alteration tools have become widely available, public distrust in video can raise questions of reasonable doubt in the eyes of a jury or in a judicial ruling. If legal precedents about the admissibility of video evidence are undermined by AI manipulation, courts may be forced to establish new standards, potentially excluding video evidence in cases where authenticity cannot be established. Media signing is intended to preserve that trust by proving video is unaltered since it left the camera that captured it.

 
How does media signing help law enforcement and the courts?

Media signing provides proof that video is unaltered since it left the camera sensor that captured it, so authenticity can be verified at every step, from the camera to a person viewing the exported recording and traced back to the recording device. Because the video is secured at the point of capture, media signing can supplement traditional chain-of-custody processes as video is shared across platforms and services. A standardized method also streamlines work for law enforcement and other criminal justice personnel, who handle footage generated by systems from many different manufacturers that may use a variety of protection methods, by giving them a common way to verify what they receive.

 
What does media signing mean for corporate investigations and human resources?

Internal investigations rely heavily on surveillance footage to resolve incidents ranging from workplace safety violations to theft and harassment claims, and human resources departments and corporate legal teams often base critical decisions on that video. When its authenticity is in doubt, organizations face increased liability risk, higher settlement costs, and greater difficulty resolving workplace disputes fairly. Confirming that footage is genuine and unaltered helps protect the decisions built on it.

 
Why does video authenticity matter to insurers?

Insurance companies have begun expressing concern about their ability to verify claims in an era of manipulable video, and some policies now specifically address digital evidence reliability. A standardized way to confirm that submitted video is authentic and is unaltered supports confident, fair claims decisions. The same need for verified video extends to public safety organizations, transportation systems, critical infrastructure protection and national security, which rely on trustworthy footage for both real-time decisions and after-action reviews.