Eaton PXG 900, Руководство пользователя

Страница: 32 / 75

PXG 900 User's Guide - Firmware Version 4.3 - 1/9/2017
30
Users and Access Control
Note: For information about the Session Timeout on the Security tab see Cybersecurity Hardening the
PXG .
Controlling access to the PXG is vital component in any effort to secure it. Many regulatory agencies and standards
organizations now recommend/require Role-Based Access Control (RBAC) as part of any access control effort. To
support this, the PXG has a robust set of tools you can use to create the set of users and role-based permissions
you need to comply with security policies in effect at your site. Before jumping into user and role setup, review your
policies and have a good understanding of the access control requirements for your site.
By default, the PXG comes with two users:
Admin: has access to all functions and can edit anything (admin role). The password for the admin account is
also admin.
User: can view any information on the tabs, but can't access Settings or edit anything. The password is user.
Before doing anything else, change the default account names and logins. Not only are these users not compliant
with RBAC, keeping them is a security hazard. Keep in mind that this manual, along with the login names and
passwords, is published on the Internet. Anyone with either physical access to the PXG or to your ICS network could
know how to login as the admin user. You'll need to replace these accounts with RBAC compliant ones to meet the
needs of your security policy. While the Admin user is useful for commissioning, it's a security risk to maintain a
single account with all permissions.
Note: Should the need arise, you can always use the reset button on the PXG itself to reset the user
set to the defaults. You'll lose all of the users and roles you've created, but you'll regain the two default
users along with their login names and passwords.
Security Tab