Endress+Hauser HART Proline t-mass I 300 - Device-specific IT security

Proline t-mass I 300 HART Safety instructions
Endress+Hauser 11
It meets general safety standards and legal requirements. It also complies with the EU
directives listed in the device-specific EU Declaration of Conformity. Endress+Hauser
confirms this by affixing the CE mark to the device.
2.6 IT security
Our warranty is valid only if the device is installed and used as described in the Operating
Instructions. The device is equipped with security mechanisms to protect it against any
inadvertent changes to the settings.
IT security measures, which provide additional protection for the device and associated
data transfer, must be implemented by the operators themselves in line with their security
standards.
2.7 Device-specific IT security
The device offers a range of specific functions to support protective measures on the
operator's side. These functions can be configured by the user and guarantee greater in-
operation safety if used correctly. An overview of the most important functions is provided
in the following section.
Function/interface Factory setting Recommendation
Write protection via hardware write
protection switch →  11
Not enabled. On an individual basis following risk assessment.
Access code
(also applies for Web server login or
FieldCare connection) →  12
Not enabled
(0000).
Assign a customized access code during
commissioning.
WLAN
(order option in display module)
Enabled. On an individual basis following risk assessment.
WLAN security mode Enabled (WPA2-
PSK)
Do not change.
WLAN passphrase
(password) →  12
Serial number Assign an individual WLAN passphrase during
commissioning.
WLAN mode Access point On an individual basis following risk assessment.
Web server →  12 Enabled. On an individual basis following risk assessment.
CDI-RJ45 service interface →  13 – On an individual basis following risk assessment.
2.7.1 Protecting access via hardware write protection
Write access to the device parameters via the local display, Web browser or operating tool
(e.g. FieldCare, DeviceCare) can be disabled via a write protection switch (DIP switch on
the motherboard). When hardware write protection is enabled, only read access to the
parameters is possible.
Hardware write protection is disabled when the device is delivered →  124.
2.7.2 Protecting access via a password
Different passwords are available to protect write access to the device parameters or access
to the device via the WLAN interface.