ABB Ability, User Manual

Page: 65 / 100

A B B A B I L I T Y
T M
ED G E I N D US T R I A L G AT E WAY
65
11
—
11.2 Access Control (Local view)
This section describes system hardening measures that can be taken to limit access to various
components in ABB Ability
TM
Edge Industrial Gateway only for users with predefined permissions/
access rights.
11.2.1 Web server access
By default, Edge Gateway Web Server will have only below User ID and password from FACTORY:
User ID: OWNER@abb.com
Password: 12345678
During the first-time login with above credentials to Web Server, user is prompted to change the
password.
Password policy
For new password to be set by user, below are the defined password complexity rule which must be
met. A password must have:
 Password must be at least 8-characters in length.
 Password must contain at least one uppercase letter.
 Password must contain at least one lowercase letter.
 Password must contain at least one special character.
 Password must contain at least one numeric character.
 Password must not exceed maximum 15-characters in length.
Account lockout policy
In Web Server, if a user failed to authenticate 5-times with incorrect password, his account will be
locked. The locked period time is 15-minute and after elapsing this period, User is again allowed to
login into web server (with correct password only).
Password history
In Web Server, user password history is maintained and user can not set the last 3-passwords again.
If user enters the same password, he is prompted to choose another password.
Password RESET
In Web Server, OWNER (admin) can reset user password. A new random password is created for the user
whose password is reset and when same user login to Web Server with system created password, user
is prompted to change password.
If OWNER (admin) forgets/lost his/her password, the user can reset the password via Provision Tool.
Password validity
In Web Server, the validity of password is defined for 180-Days, and after expiry of this time, user is
prompted to change his/her password.