BE1-CDS220 Security
9-1
SECTION 9
•
SECURITY
INTRODUCTION
In this section, security, in the form of multilevel password protection, is discussed along with the
information required for protecting specific function groups and user interface components against
unauthorized access.
Passwords provide access security for three distinct functional access areas: Settings, Reports, and
Control. Each functional area can be assigned a unique password or one password can be assigned to
multiple areas. A global password is used to access all three of the functional areas. BE1-CDS220
passwords are not case sensitive; either lowercase or uppercase letters may be entered. Password
security only limits write operations; passwords are never required to read information from any area.
Additional security is provided by controlling the functional areas that can be accessed from a particular
communication port. For example, security can be configured so that access to control commands from
the rear RS-232 port (COM1) is denied. An attempt to issue a Control command through COM1 will cause
the relay to respond with an ACCESS DENIED and/or INVALID PASSWORD message. This will occur
whether a valid password is entered or not. When configuring communication port access areas, you
should be aware that the front RS-232 port (COM0) and the front panel human-machine interface (HMI)
are treated as the same port.
The communication ports and password parameters act as a two-dimensional control to limit changes. In
order for a command to be accepted, the entered password must be correct and the command must be
entered through a valid port. Only one password can be active at one time for any area or port. For
example, if a user gains write access at COM1, then users at other areas (COM0, front panel human-
machine interface (HMI) and COM2) won't be able to gain write access until the user at COM1 uses the
EXIT command to release access control.
If a port holding access privileges sees no activity (command entered or HMI key pressed) for
approximately five minutes, access privileges and any pending changes will be lost. This feature ensures
that password protection can't be accidentally left in a state where access privileges are enabled for one
area and other areas locked out for an indefinite period.
If password protection is disabled, then entering ACCESS= followed by no password or any alphanumeric
character string will obtain access to the unprotected area(s).
Setting Up Password Protection
Password protection is configured for each access area port and communication port using BESTCOMS.
Alternately, password protection can be configured using the GS-PW ASCII command.
To configure password protection using BESTCOMS, select General Operation from the Screens pull-
down menu. Then select the Global Security tab. Refer to Figure 9-1.
Summary of Contents for BE1-CDS220
Page 2: ......
Page 10: ...viii Introduction BE1 CDS220 This page intentionally left blank...
Page 36: ...ii Quick Start BE1 CDS220 This page intentionally left blank...
Page 48: ...ii Input And Output Functions BE1 CDS220 This page intentionally left blank...
Page 66: ...iv Protection and Control BE1 CDS220 This page intentionally left blank...
Page 112: ...ii Metering BE1 CDS220 This page intentionally left blank...
Page 116: ...5 4 Metering BE1 CDS220 This page intentionally left blank...
Page 166: ...ii BESTlogic Programmable Logic BE1 CDS220 This page intentionally left blank...
Page 176: ...7 10 BESTlogic Programmable Logic BE1 CDS220 This page intentionally left blank...
Page 234: ...8 56 Application BE1 CDS220 This page intentionally left blank...
Page 236: ...ii Security BE1 CDS220 This page intentionally left blank...
Page 240: ...9 4 Security BE1 CDS220 This page intentionally left blank...
Page 242: ...ii Human Machine Interface BE1 CDS220 This page intentionally left blank...
Page 256: ...10 14 Human Machine Interface BE1 CDS220 This page intentionally left blank...
Page 258: ...ii ASCII Command Interface BE1 CDS220 This page intentionally left blank...
Page 422: ...14 32 BESTCOMS Software BE1 CDS220 This page intentionally left blank...
Page 424: ...ii Time Current Characteristics BE1 CDS220 This page intentionally left blank...
Page 452: ...ii Terminal Communication BE1 CDS220 This page intentionally left blank...
Page 456: ...C 4 Terminal Communication BE1 CDS220 This page intentionally left blank...
Page 458: ...ii Settings Calculations BE1 CDS220 This page intentionally left blank...
Page 475: ......