l
Setting security codes (see following information under "Security Codes").
l
Setting a PakBus/TCP password. The PakBus TCP password controls access to PakBus
communication over a TCP/IP link. PakBusTCP passwords can be set in Device
Configuration Utility.
l
Disabling FTP or setting an FTP username and password in Device Configuration Utility.
l
Setting a PakBus encryption (AES-128) key in Device Configuration Utility. This forces
PakBus data to be encrypted during transmission.
l
Disabling HTTP/HTTPS or creating a
.csipasswd
file to secure HTTP/HTTPS (see
(p. 107) for more information).
l
Enabling HTTPS and disabling HTTP. To prevent data collection via the web interface, both
HTTP and HTTPS must be disabled.
l
Tracking Operating System, Run, and Program signatures.
l
Encrypting program files if they contain sensitive information (see CRBasic help
FileEncrypt()
instruction or use the CRBasic Editor File menu, Save and Encrypt
option).
l
Hiding program files for extra protection (see CRBasic help
FileManage()
instruction).
l
Monitoring your data logger for changes by tracking program and operating system
signatures, as well as CPU file contents.
l
Securing the physical data logger and power supply under lock and key.
WARNING:
All security features can be subverted through physical access to the data logger. If absolute
security is a requirement, the physical data logger must be kept in a secure location.
16.2.1 TLS
Transport Layer Security (TLS) is an internet communications security protocol. TLS settings are
necessary for server applications, not for client applications.
Example server application instructions include:
l
HTTPS server
l
DNP3()
Example client application instructions include:
l
HTTPGet()
,
HTTPPut()
and
HTTPPost()
l
EmailRelay()
l
EmailSend()
and
EmailRecv()
l
FTPClient()
Use the Device Configuration Utility to enable and set up TLS. See Deployment > Datalogger >
TLS tab.
16. CR300 series maintenance
105
