Unable to Authenticate with Hikvision AX Pro ISAPI Endpoints (401 Unauthorized)

Configuration
,
1

Hi everyone,

I’m trying to integrate my Hikvision AX Pro alarm system using the ISAPI endpoints to arm/disarm the system. However, I keep getting 401 Unauthorized responses despite using the credentials I use to log into the web platform.

Device Info:

  • Model: Hikvision AX Pro Alarm Hub
  • Firmware: Default/reset
  • Access via web: works with my usual username/password

Issue:
Even after a factory reset of the device, I cannot authenticate with the ISAPI endpoints using either:

  1. The web platform credentials
  2. The supposed internal default credentials (admin/ 123456)

Example CURL commands tried:

curl -i -k --user admin:pass http://192.168.4.32/ISAPI/SecurityCP/ctrl/arm

All commands return 401 Unauthorized, even after a device reset. The web platform works fine with my credentials, so it seems the internal ISAPI credentials are different from the web credentials and possibly different from the documented defaults.

2

Hi, I had a similar issue a few days ago using NodeRed, which talks to my AX Hybrid Pro via ISAPI.

I found that if I had the Alarm Panel disconnected from the cloud, the local admin user would work fine and NodeRed could get data.

As soon as I connected it to the Hik Connect cloud, the admin user would disappear and was replaced by my APP username. If NodeRed tries to use either the admin account or the APP account, I would get the Unauthorised message. I’m guessing at that point the admin account is disabled and the APP account is not compatible.

The solution was to enable the installer account. I could then continue to login on the APP or on the webpage with the APP account name, and NodeRed was happy using the installer account. Note that having the installer account enabled does seem to downgrade the local admin account to a power user instead of full admin, but the APP account seems to be OK still.