ONVIF Profile S Retirement: Profile T, Cybersecurity and the Future of CCTV Interoperability
Introduction: An important change in CCTV interoperability
Interoperability is a key requirement in modern IP video surveillance. Cameras, video encoders and video management systems (VMS) from different manufacturers must communicate reliably if organisations are to avoid unnecessary dependence on proprietary technologies.
The Open Network Video Interface Forum (ONVIF) addresses this requirement through standardised profiles that define interoperability for specific functions.
ONVIF is evolving its specifications to address changing requirements for video streaming, secure communications and cloud-connected surveillance. One of the most significant developments is the retirement of Profile S and the recommendation to use Profile T for modern video-streaming applications. For CCTV manufacturers, system integrators, government buyers and VMS developers in India, this transition has practical implications for equipment selection, system upgrades and tender specifications.
1. ONVIF Profile S retirement: What changes?
Introduced in 2011, ONVIF Profile S established a common framework for basic IP video streaming between compatible cameras, encoders and client software. It helped simplify multi-vendor surveillance deployments and reduce the need for proprietary integrations.
In October 2025, ONVIF announced that it would end support for Profile S, recommending Profile T as the successor for relevant video-streaming applications. The announced deadline is 31 March 2027.
The decision reflects security concerns associated with Profile S’s username-token authentication method and the need to adopt more modern security practices. However, the retirement does not mean that all Profile S cameras will stop working after the deadline. Existing devices may continue operating, depending on firmware, manufacturer support and compatibility with the VMS in use.
Key takeaway: Profile S retirement is a reason to review existing installations, not an automatic requirement to replace every legacy camera.
Official reference: ONVIF Profile S Deprecation FAQ
2. ONVIF Profile S vs Profile T: Key differences
ONVIF Profile T supports advanced video-streaming capabilities and features relevant to contemporary IP surveillance systems, including H.264 and H.265 video, imaging settings and supported security mechanisms. The following table summarises the principal differences.
| Feature | ONVIF Profile S | ONVIF Profile T |
|---|---|---|
| Introduction | 2011 | Introduced later for advanced video streaming |
| Primary purpose | Basic IP video streaming | Advanced IP video streaming |
| Video codecs | H.264; also Motion JPEG and MPEG4; capabilities depend on implementation | H.264 and H.265 |
| Imaging and camera controls | Supported basic functions | Additional standardised imaging and camera-control capabilities |
| Events and metadata | Supported functions depend on the device | Additional standardised capabilities, depending on implementation |
| Authentication and security | Legacy username-token authentication is a concern in the retirement decision | Supports more modern authentication and secure-communication options |
| Future conformance | Support scheduled to end on 31 March 2027 | Recommended path for relevant modern streaming products |
| Procurement approach | Assess installed devices and plan transition | Consider for new deployments where required features are supported |
Note: This is a high-level comparison, not a complete protocol specification. Actual capabilities depend on the device, its implementation and relevant conformance requirements.
Profile T can provide a stronger basis for interoperability in new deployments, but a profile designation does not guarantee that every camera function will be available through every VMS. Buyers should verify required features and check the official ONVIF product database.
3. ONVIF Profile V: Towards cloud-connected surveillance
Cloud and hybrid video surveillance are increasingly relevant to organisations managing cameras across multiple locations. In July 2026, ONVIF announced a Profile V draft intended to improve interoperability between devices and cloud video management systems.
The proposed capabilities include secure outbound device connections, WebRTC-based video delivery, event notifications and encrypted transfer of recordings to cloud storage. For transport networks, utilities, government facilities and geographically distributed sites, such standardisation could simplify integration of remote cameras with centralised video platforms.
Profile V’s draft or release-candidate status must be distinguished from a final published specification. Confirm its current status and verify product support before making it a mandatory tender requirement.
Official reference: ONVIF Profile V announcement
4. Stronger communications security through TLS
Secure communication is essential when cameras connect to VMS platforms, remote monitoring systems and cloud services. In September 2026, ONVIF announced a release candidate for TLS Configuration Add-on 2.0, intended to standardise aspects of encrypted communication between devices and systems.
Transport Layer Security (TLS) helps protect data in transit when properly implemented and configured. However, encryption alone does not make a CCTV network secure. Organisations must also address network segmentation, strong credentials, firmware updates, access restrictions and secure remote maintenance. Confirm the add-on’s final publication status before using it as the basis for procurement specifications.
Official reference: ONVIF TLS Configuration Add-on announcement
5. ONVIF Media Signing: Protecting video integrity
Recorded CCTV footage is frequently used for incident investigations, security reviews and legal proceedings. Establishing whether a recording has been altered can therefore be important.
In August 2026, ONVIF announced a release candidate of a Media Signing Add-on (final release expected by the end of 2026) designed to help establish the authenticity and integrity of surveillance video. This could be relevant to public safety projects, critical infrastructure, transport networks and industrial facilities where recorded footage may need to be verified.
Media signing can help determine whether protected video has been altered, subject to the signing and verification process. It does not, by itself, prove that the original scene was genuine or that the camera captured the correct location and circumstances. Video-integrity capabilities should complement secure recording, audit trails, access controls and documented evidence-handling procedures.
Reference: ONVIF official website
6. What should CCTV buyers and VMS developers in India do?
- New CCTV tenders: Consider Profile T where its features meet project requirements. Specify capabilities rather than relying on a profile name alone.
- Existing camera networks: Identify Profile S devices and assess firmware support, security configuration and compatibility with the deployed VMS.
- Cloud and hybrid surveillance: Track Profile V’s publication status and verify compatibility across devices and video platforms.
- Cybersecurity: Review encryption, authentication, network segmentation, firmware updates and remote-access controls.
- Video evidence: Evaluate whether media-integrity verification is needed for operational and evidentiary requirements.
- VMS manufacturers and integrators: Test the actual camera models, firmware versions and software releases that will be deployed.
ONVIF conformance is an important indicator of interoperability, but it does not guarantee universal compatibility or replace security assessments and system-level testing.
Conclusion: Plan the transition to modern ONVIF standards
The retirement of ONVIF Profile S marks an important transition in IP video surveillance. Profile T is the recommended path for relevant modern video-streaming applications, while developments in cloud connectivity, TLS configuration and Media Signing address other important requirements of contemporary surveillance systems.
For India’s smart cities, government agencies and enterprise security operators, the priority should be a structured review of existing equipment and clear requirements for future deployments.
Reliable CCTV interoperability depends on verified conformance, secure implementation, supported equipment and thorough testing across cameras, networks and video management systems.
Related reading: Video Analytics Providers for Smart Cities: Test Before You Buy and Data Privacy and Video Surveillance.
Looking for smarter, secure-by-design video surveillance? Explore aigence AI Video Analytics.
Official references
- ONVIF Profile S Deprecation FAQ
- ONVIF Profile V announcement
- ONVIF TLS Configuration Add-on announcement
- ONVIF Media Signing Add-on announcement
- ONVIF official website
Before publication or use in tender documentation, verify the latest official specifications, release status and product conformance records.