16 Locking down the controller 49
16 Locking down the controller
16.1 Intended locking use cases
In some cases it's required to grant administrative access to multiple, possibly not completely trusted, parties. The
settings described below are designed to somewhat limit what an administrator can do to the device.
16.2 Protection bits
The following operations available to the administrator pose an increased risk and can be protected:
• changing administrator credentials;
• changing networking settings;
• changing notification settings;
• backing up private settings (passwords, keys, etc.);
• restoring settings from backup;
• upgrading firmware;
• entering maintenance mode.
16.3 Protection status indication
Overall protection status is indicated in the top right corner of each page:
• — no protection bits active;
• — some protection bits active;
• — all protection bits active.
Clicking on the icon gives more detailed info:
Firmwareprotectionisdisabled
Notificationsettingsprotectionisdisabled
Privateconfigurationprotectionisenabledbutineffective:
SSHisenabled,whichcouldbeusedtobypassprotection
Firmwareuploadisallowed,speciallycraftedfirmwarecouldbeusedtobypassprotection
Administratorcredentialsprotectionisdisabled
Maintenancemodelockisenabledbutineffective:
SSHisenabled,whichcouldbeusedtobypassprotection
Firmwareuploadisallowed,speciallycraftedfirmwarecouldbeusedtobypassprotection
Protectionfromrestorefrombackupisenabledbutineffective:
SSHisenabled,whichcouldbeusedtobypassprotection
Firmwareuploadisallowed,speciallycraftedfirmwarecouldbeusedtobypassprotection
Networksettingsprotectionisdisabled
To Next Page
Loading...