Campbell CR6 Series, Operator'S Manual

Page: 484 / 690

Section 8. Operation
484
•
Set passcode lockouts
• Set PakBus/TCP password
• Set FTP username and password
•
Set AES-128 PakBus encryption key
• Set .csipasswd file for securing HTTP and web API
•
Track signatures
•
Encrypt program files if they contain sensitive information
• Hide program files for extra protection
• Secure the physical CR6 and power supply under lock and key
Note All security features can be subverted through physical access to the CR6.
If absolute security is a requirement, the physical CR6 must be kept in a secure
location.
8.7.1 Vulnerabilities
While "security through obscurity" may have provided sufficient protection in the
past, Campbell Scientific dataloggers increasingly are deployed in sensitive
applications. Devising measures to counter malicious attacks, or innocent
tinkering, requires an understanding of where systems can be compromised and
how to counter the potential threat.
Note Older CR6 operating systems are more vulnerable to attack than
recent updates. Updates can be obtained free of charge at
www.campbellsci.com .
The following bullet points outline vulnerabilities:
•
CR1000KD Keyboard/Display
o
Pressing and holding the Del key while powering up a CR6 will
cause it to abort loading a program and provides a 120 second
window to begin changing or disabling security codes in the settings
editor (not Status table) with the keyboard display.
o
Keyboard display security bypass does not allow comms access
without first correcting the security code.
o Note These features are not operable in CR1000KDs with serial
numbers less than 1263. Contact Campbell Scientific for information
on upgrading the CR1000KD operating system.