With AXIS OS 13.0, ACAP application security takes an important step forward. All ACAP applications installed on an Axis device must be digitally signed, ensuring the integrity and authenticity of applications deployed in production.

To enable developers to continue building, testing and debugging ACAP applications without the overhead of signing every build, Axis is introducing a developer mode setup for AXIS OS 13.

Developer Mode in AXIS OS 13

The Developer Mode is a dedicated development environment for ACAP applications, enabling you to:

  • Install unsigned ACAP applications during development.
  • Enable SSH access to ACAP applications for easier debugging and troubleshooting.
  • Develop and iterate faster while maintaining a secure production model.
     

Unlike previous AXIS OS releases, Developer Mode can no longer be enabled via a Custom Firmware Certificate (CFC). Requesting and installing a Developer Mode ACAP application is the new method for enabling Developer Mode in AXIS OS 13.

A secure-by-design approach

Developer Mode ACAP applications are generated specifically for:

  • A single Axis device
  • A single developer/vendor identity
     

This ensures that unsigned applications can only be installed on development devices that have their corresponding Developer Mode ACAP application installed.

nota

In the unsigned ACAP application, the vendorId in the manifest.json matches the vendorId associated with the installed Developer Mode ACAP application.

How to request a Developer Mode ACAP application

To get started, any developer with a My Axis account can request a Developer Mode ACAP application for their development device. 

During the request process you will need to provide:

  • The device Serial Number
  • The Owner Authentication Key (OAK)
     

Once generated, you will receive a device-specific signed .eap package that enables Developer Mode on your device.

Uninstalling the Developer Mode ACAP application

If the Developer Mode ACAP application is removed, Developer Mode is immediately disabled. Any unsigned ACAP applications installed during the development are automatically removed, and SSH users created for the ACAP applications are deleted.

Security recommendations

Developer Mode is intended exclusively for development and testing environments.

To help protect your devices and applications:

  • Only install unsigned applications from trusted sources.
  • Limit administrator access to authorized developers.
  • Store the downloaded Developer Mode ACAP package securely, as it is device-specific and may contain sensitive information.

Getting started

Visit the developer documentation to learn more about Developer Mode for AXIS OS 13, including how to request, install, configure, and use Developer Mode during ACAP application development.

More information about AXIS OS 13 can be found in the AXIS OS Lifecycle guide and the latest pre-releases are available for download on axis.com.