Figure 2-2. CMT Login Screen
2.8
Security
This section describes the key GridTime 3000's security features.
The GridTime 3000's Clock Management Tool (CMT) is password protected, and supports multiple user logins with
administrator controlled levels of access.
It also has additional security built into the upgrade procedure with RSA signatures and RSA/AES encryption
and hardware based assurance and validation modules. Preventing the upload of malicious or corrupted firmware
images.
The GridTime 3000 also supports Industry standard RSA based security on its Clock Management Tool (CMT),
AES/SHA on Simple Network Management Protocol (SNMPv3), as well as MD5 hashed Network Time Protocol
(NTP).
2.8.1
User Security Model
This section describes the user security model used by the GridTime 3000.
The GridTime 3000 features a user security model (USM) that is split into users and roles. A user is an indidivual
log in and represents one person, a role is a group in which a user may be placed in. Each role has it's own set of
admin-configured permissions and will dictate what configuration settings each user can read or write to.
With the GridTime 3000's USM each role may have multiple users assigned to it.
Note:
Both Clock Management Tool (CMT) and SNMPv3 users can be assigned to a role and will have the
permission set of that role enforced..
There is always an administrator role defined, this role allows full read and write access to all settings and access
to all CMT menus. The administrator role permissions cannot be viewed or edited. Additional roles with variable
permission sets can be generated by the administrator user. Only the administrator role allows access to the
advanced CMT menus, and the CMT authorization module where CMT user login settings are modified.
Key Benefits
©
2022 Microchip Technology Inc.
and its subsidiaries
Manual
DS00004572A-page 12
