3 IT security
Maschinenfabrik Reinhausen GmbH 201818 5252433/02 ENECOTAP
®
VPD
®
CONTROL PRO
3 IT security
Observe the following recommendations for secure operation of the product.
General
▪ Ensure that only authorized personnel have access to the device.
▪ Only use the device within an ESP (electronic security perimeter). Do not
connect the device to the Internet in an unprotected state.
▪ Ensure that the device is only operated by trained personnel who are fa-
miliar with IT security.
Commissioning
Observe the following recommendations for device commissioning:
▪ User IDs should be unique and attributable. Do not use a "Group account"
function or an "Auto login" function.
▪ Restrict the rights of the individual user groups as much as is feasible; this
helps avoid errors during operating actions. A user with the "Operator"
role, for example, should only perform operating actions and should not
be able to change any device settings.
▪ Delete or disable the default "admin" user ID. This requires first creating a
new user account with the "Administrator" role. You can then use it to
delete or disable the default "admin" account.
▪ Enable SSL/TLS encryption [►Section 8.2, Page 66]; access to the de-
vice is then only possible using the SSL/TLS protocol. In addition to en-
crypting communication, this protocol also checks the authenticity of the
server.
▪ Use TLS version 1.2 or higher wherever possible.
▪ Integrate the device into a public key infrastructure. Create your own SSL
certificate for this if necessary and then import it.
Operation
Observe the following recommendations during device operation:
▪ Change the password at regular intervals.
▪ Export the security log [►Section 8.17.1, Page 169] at regular intervals.
Interfaces
The device uses the following interfaces for communication:
To Next Page
