Endress+Hauser Proline Promass E 300 - Product Safety and IT Security; Product Safety; IT Security; Device-Specific IT Security

Safety instructions Proline Promass E 300 PROFINET
12 Endress+Hauser
2.5 Product safety
This measuring device is designed in accordance with good engineering practice to meet
state-of-the-art safety requirements, has been tested, and left the factory in a condition in
which it is safe to operate.
It meets general safety standards and legal requirements. It also complies with the EU
directives listed in the device-specific EU Declaration of Conformity. Endress+Hauser
confirms this by affixing the CE mark to the device.
2.6 IT security
Our warranty is valid only if the device is installed and used as described in the Operating
Instructions. The device is equipped with security mechanisms to protect it against any
inadvertent changes to the settings.
IT security measures, which provide additional protection for the device and associated
data transfer, must be implemented by the operators themselves in line with their security
standards.
2.7 Device-specific IT security
The device offers a range of specific functions to support protective measures on the
operator's side. These functions can be configured by the user and guarantee greater in-
operation safety if used correctly. An overview of the most important functions is provided
in the following section.
Function/interface Factory setting Recommendation
Write protection via hardware write
protection switch →  12
Not enabled. On an individual basis following risk
assessment.
Access code
(also applies for Web server login or
FieldCare connection) →  13
Not enabled
(0000).
Assign a customized access code during
commissioning.
WLAN
(order option in display module)
Enabled. On an individual basis following risk
assessment.
WLAN security mode Enabled (WPA2-
PSK)
Do not change.
WLAN passphrase
(password) →  13
Serial number Assign an individual WLAN passphrase during
commissioning.
WLAN mode Access Point On an individual basis following risk
assessment.
Web server→  13 Enabled. On an individual basis following risk
assessment.
CDI-RJ45 service interface →  14 – On an individual basis following risk
assessment.
2.7.1 Protecting access via hardware write protection
Write access to the device parameters via the local display, Web browser or operating tool
(e.g. FieldCare, DeviceCare) can be disabled via a write protection switch (DIP switch on
the motherboard). When hardware write protection is enabled, only read access to the
parameters is possible.
Hardware write protection is disabled when the device is delivered →  139.