Endress+Hauser Proline Promass E 500 - Security; Device-Specific IT Security; Protecting Access Via Hardware Write Protection; Protecting Access Via a Password

Proline Promass E 500 PROFIBUS PA Safety instructions
Endress+Hauser 11
2.6 IT security
The manufacturer warranty is valid only if the product is installed and used as described in
the Operating Instructions. The product is equipped with security mechanisms to protect it
against any inadvertent changes to the settings.
IT security measures, which provide additional protection for the product and associated
data transfer, must be implemented by the operators themselves in line with their security
standards.
2.7 Device-specific IT security
The device offers a range of specific functions to support protective measures on the
operator's side. These functions can be configured by the user and guarantee greater in-
operation safety if used correctly. The following list provides an overview of the most
important functions:
Function/interface Factory setting Recommendation
Write protection via hardware write
protection switch →  11
Not enabled On an individual basis following risk assessment
Access code
(also applies to web server login or
FieldCare connection) →  12
Not enabled
(0000)
Assign a customized access code during
commissioning
WLAN
(order option in display module)
Enabled On an individual basis following risk assessment
WLAN security mode Enabled (WPA2-
PSK)
Do not change
WLAN passphrase
(Password) →  12
Serial number Assign an individual WLAN passphrase during
commissioning
WLAN mode Access point On an individual basis following risk assessment
Web server →  12 Enabled On an individual basis following risk assessment
Service interface CDI-RJ45 →  12 – On an individual basis following risk assessment
2.7.1 Protecting access via hardware write protection
Write access to the parameters of the device via the local display, web browser or
operating tool (e.g. FieldCare, DeviceCare) can be disabled via a write protection switch
(DIP switch on the main electronics module). When hardware write protection is enabled,
only read access to the parameters is possible.
Hardware write protection is disabled when the device is delivered →  161.
2.7.2 Protecting access via a password
Different passwords are available to protect write access to the device parameters or access
to the device via the WLAN interface.
• User-specific access code
Protect write access to the device parameters via the local display, web browser or
operating tool (e.g. FieldCare, DeviceCare). Access authorization is clearly regulated
through the use of a user-specific access code.
• WLAN passphrase
The network key protects a connection between an operating unit (e.g. notebook or
tablet) and the device via the WLAN interface which can be ordered as an option.
• Infrastructure mode
When the device is operated in infrastructure mode, the WLAN passphrase corresponds
to the WLAN passphrase configured on the operator side.