l How to Use Datalogger Security Codes
l How Can Data be Made More Secure on a CRBasic PakBus Datalogger
8.2.2 Creating a .csipasswd file
The datalogger employs a security code scheme that includes three levels of security (see
Datalogger security (p. 100) for more information). This scheme can be used to limit access to a
datalogger that is publicly available. However, the security codes are visible in Device
Configuration Utility. In addition, the range of codes is relatively small. To provide a more robust
means of security, Basic access authentication was implemented with the HTTP API interface in
the form of an encrypted password file named .csipasswd. Read/write access to the web
interface requires a .csipasswd file. The web interface provides access to real-time and stored
datalogger data. For more information on the web interface, watch an instructional video.
When a file named .csipasswd is stored on the datalogger CPU drive, basic access
authentication is enabled in the datalogger and read/write access to the web interface can be
defined. Multiple user accounts with differing levels of access can be defined for one datalogger.
Four levels of access are available:
l None: Disable a user account.
l Read Only: Data collection is unrestricted. Clock and writable variables cannot be changed.
Programs cannot be viewed, stopped, deleted, or retrieved.
l Read/Write: Data collection is unrestricted. Clock and writable variables can be changed.
Programs cannot be viewed, stopped, deleted, or retrieved.
l All: Data collection is unrestricted. Clock and writable variables can be changed. Programs
can be viewed, stopped, deleted and retrieved.
NOTE:
All levels of access allow data collection.
Create an encrypted password file or modify an existing password file using Device Configuration
Utility:
1. Connect to your device in Device Configuration Utility.
2. Click the Network Services tab, then the Edit .csipasswd File button.
3. Define user accounts and access levels.
4. Click Apply. The .csipasswd file is automatically saved to the datalogger CPU drive.
When a .csipasswd file is used, the PakBus/TCP Password security setting is not used when
accessing the datalogger via HTTP. If the .csipasswd file is blank or does not exist, the default
user name is "anonymous" with no password and a user level of read only.
8. Maintaining your datalogger 103
To Next Page
Loading...
Need help?
General
