Quick answer: Put the NVR in a controlled-access location and choose an enclosure that fits its weight, cables and ventilation needs. Add enclosure monitoring only through a compatible input or interface. Size battery backup for the recorder and every device needed to keep cameras recording, then test power loss, heat and access control at handover.
On this page
Why does the recorder need physical protection?
A strong password cannot stop someone who can unplug the recorder or remove its drives. If that recorder holds the only usable copy of the footage, physical removal can also remove the evidence. Start with access to the equipment room, keys, cable routes and power. Use the NVR hardening checklist alongside this physical check.
Plan for three jobs: make unauthorized access harder, make interference visible where monitoring is supported, and keep the required recording path powered. None replaces the others. A lockable cabinet still needs airflow, and an alarm cannot notify anyone if its power or communications path has already failed.
Keep the recording path powered
- Recorder: include installed drives and any internal PoE camera load.
- External PoE switch: include its connected camera load and conversion losses; do not count the same camera load twice.
- Network path: include the router or other equipment needed for the functions that must remain available.
Check the UPS watt and VA limits, then its runtime curve at this load. A diagram does not establish a runtime.
Where should the NVR go, and which lock box or rack fits?
Choosing the location
- A room or closet with a lockable door that the public, tenants and casual staff cannot enter.
- Not in the same space as the cash, the stock or the office the camera is protecting, where a thief will look first.
- Not on the floor of a basement or warehouse that can flood, and not under a roof drain or sprinkler line where a leak lands on the equipment.
- Within the cable budget to the cameras and the switch; see Cat6 cable length planning.
- Have a qualified electrical professional verify the supply, circuit, protection and local installation requirements. Keep the UPS and connected equipment accessible for service.
- Where appropriate, cover access to the enclosure with a camera. Footage stored only on the same recorder may be lost with that recorder; assess an independent recording path where the risk justifies it.
Choosing the enclosure
| Option | Best for | Watch out for |
|---|---|---|
| Wall-mount NVR lock box | Small sites with one recorder, a modem and a small switch | Ventilation: a sealed steel box with no airflow cooks the drives |
| Lockable wall-mount 19-inch rack cabinet | Recorder plus a rack-mount PoE switch, patch panel and UPS | Cabinet depth against the deepest device; wall strength for the loaded weight |
| Floor-standing rack in a locked IT or electrical room | Larger systems, multiple recorders, shared with the customer’s IT | Who else holds a key; label the security equipment clearly |
| Space in the customer’s existing IT rack | Sites where IT already controls a secured room | Agree in writing who may touch the recorder and its power |
Measure the exact recorder and switch before ordering a cabinet. Check the depth including plugs and cable bends, supported shelf or rail method, loaded weight and manufacturer clearances. Do not assume that a device fits or can be mounted by its front panel simply because the enclosure is 19-inch.
How do you detect tampering with the recorder?
A lock slows someone down; an alert tells you it happened. Use the recorder’s own inputs and events, which are confirmed per model and firmware:
- Door contact or enclosure monitoring. Confirm that the exact NVR has a suitable alarm input and that the contact or interface matches its electrical requirements. A dry-contact input and a TTL-level input are not interchangeable assumptions. Follow the approved wiring diagram; do not apply an external voltage to an input without explicit documentation. Configure and test the supported event action and notification path.
- Camera or link-loss monitoring. Enable supported offline or video-loss events and test what the customer actually receives. Delivery depends on the configured event, power, network and software; do not promise an alert within a fixed number of minutes without a tested requirement.
- Enclosure camera. Test its view with the door closed and open. Consider where that footage is stored and what remains available if the NVR or its power is removed.
- Tamper-evident seals on drive bays or rack screws where the customer wants proof that no one opened them between service visits.
- Independent recording where supported. A memory slot alone does not establish failover or automatic backfill. Confirm the card, recording mode and retrieval method for the exact camera. It must still have power if the recorder is removed; test the actual failure scenario.
Protect the cable path as well. Exposed runs from the enclosure to the first camera are an easy target; use conduit or covered raceway where people can reach them, installed per NEC (CEC in Canada) and the local code.
How do you size a UPS for an NVR and PoE switch?
A UPS can keep the required equipment powered for its available battery runtime. It does not automatically provide a controlled NVR shutdown: signaling and shutdown support must be confirmed for the exact recorder and UPS. Check both output watts and VA, connector compatibility, the load and the manufacturer’s runtime curve.
The formula
- List every device that must stay up: recorder, PoE switch (which also powers the cameras), modem and router.
- Use the installed configuration’s measured load and documented maximum demands. For PoE equipment, distinguish the camera-output budget from the complete AC input load and avoid double-counting cameras.
- Add them, then add 20 to 25 percent headroom.
- Check both the UPS watt and VA ratings, then use its runtime chart at the expected load. Allow for peak demand, battery aging and the required service interval.
A worked example
| Equipment | Illustrative AC input load |
|---|---|
| Recorder, including its drives; cameras powered separately | 40 W |
| External PoE switch, including its camera load | 180 W |
| Modem and router | 20 W |
| Total | 240 W |
| With 25% planning headroom: 240 × 1.25 | 300 W |
All values in this example are illustrative; replace them with the actual configuration’s measurements and documented requirements. A UPS with a suitable output rating still needs a runtime check. Do not promise minutes or hours from a watt or VA label alone. Use the UPS manufacturer’s runtime chart and test the agreed load and failure scenario.
UPS practicalities
- Select equipment approved for the installation’s market and application, with the correct input, outlets and electrical ratings. Ask the electrical professional to resolve applicable installation requirements.
- Line-interactive units suit most small sites; online double-conversion units suit sites with poor or generator power.
- Connect the UPS signaling port to the recorder only if the recorder supports it, confirmed per model and firmware.
- Batteries age; test the UPS at the annual visit and plan replacement per its documentation.
- Surge protection for outdoor cables is a separate job; see lightning and surge protection for outdoor and PTZ cameras.
How do you handle heat, ventilation and humidity?
Check the environmental limits of every installed device, including the drives and UPS batteries, and design to the most restrictive applicable limit. Measure the enclosure with its door closed and the system at the expected load. A room-temperature reading outside the cabinet does not prove the recorder’s internal air path is acceptable.
- Choose an enclosure with vents or a fan kit sized for the heat load; the UPS and switch add heat as well as the recorder.
- Keep the front and rear vents of each device clear; do not stack devices directly on each other without the spacing their documentation calls for.
- Avoid closets that share a wall with a furnace, a boiler or a sun-facing exterior wall without insulation.
- In unheated buildings, check that the low end of every range is met in winter, and watch for condensation when warm air meets a cold enclosure.
- Dust clogs fans and filters; clean them at each service visit.
Include airflow and filter checks in the service plan. Record temperatures and investigate changes rather than waiting for a drive or thermal alarm. A replacement drive cannot recreate footage that was never recorded.
What belongs on the physical-security handover checklist?
- Location of the recorder, the enclosure type and who holds the keys.
- Enclosure monitoring method, input/interface compatibility, supported event action and the result of a live notification test; mark it not applicable if no compatible method is installed.
- Camera covering the enclosure, with its channel number.
- UPS model, load at commissioning, runtime from its chart, and the next battery test date.
- Ventilation checked with the enclosure closed and the system running.
- Cable paths protected where reachable.
- Photos of the open enclosure and labeled cabling in the job folder.
Physical access is also one line of the network hardening checklist in hardening a CASE NVR; the two belong in the same handover file.
What to tell your customer
Suggested handover wording: “Here is who can access the recorder, what the cabinet and monitoring protect, and the power-loss result we tested. These devices are on battery backup. Keep the vents clear and use the agreed service schedule. The record also lists what will stop working when battery runtime ends.”
FAQ
Does an NVR need a lock box if it is already in a locked room?
Not always. A locked room that only trusted staff can enter may be enough, provided the recorder is covered by a camera and its power is protected. A lock box or lockable rack adds a second layer where many people share the room, where cleaning or maintenance contractors have keys, or where the customer wants a tamper alert on the enclosure itself.
How do I get an alert when someone opens the NVR enclosure?
Use a compatible recorder input or a separate approved monitoring interface. Confirm the contact type, electrical levels and wiring before connecting anything. Then test the supported event and the complete notification path. An input, event setting or app name alone does not guarantee that a message will reach the customer.
What size UPS does an NVR need?
Add the maximum consumption of the recorder, the PoE switch and the router from their spec sheets or labels, then add 20 to 25 percent headroom. Choose a UPS whose watt rating exceeds that total, and read its runtime chart at your load. A PoE switch at full load is often the largest item, because it also powers the cameras.
How hot can it get inside an NVR enclosure?
It depends on the enclosure, the room and the load, so measure it with the system running and the door closed. Compare the result with the narrowest operating range of any device inside, which is usually the recorder and its drives. Vents, a fan kit and clearance between devices cost far less effort than replacing drives and explaining missing footage.
Can a camera keep recording if the NVR is stolen?
Only when an independent recording method is supported, configured and tested, and the camera remains powered. A memory-card slot is not a complete resilience plan. Check retention, retrieval and any failover or backfill behavior for the exact model and firmware.
Selecting equipment for the cabinet? Review the network video recorder range and the Anabon product range, then confirm the exact dimensions, power and installation requirements with technical support.
