background image

October 2021

7

PWPP HH P1 - Manual

SECURITY

BACKGROUND INFORMATION

On 

January 1, 2020

, California became the first state to enforce cybersecurity and IoT related legislation. Oregon, New 

York and Massachusetts are following suit. California’s law is Title 1.81.26 “Security of Connected Devices” and mandates 
that we equip our products with security features that are appropriate to the nature and function of the device. By law, this 
encompasses all products that are assigned Internet Protocol addresses which can connect to the Internet directly or indirectly. 
Pathway Connectivity, a division of Acuity Brands, will only ship compliant devices regardless of the jurisdiction into which 
they are sold.

The law requires us to either supply a unique password for our products (see 

Local Configuration Only

 below) or requires 

the users to change the password before being able to use it (See 

Creating a Security Domain

 below). With Pathscape V3 

and later, we provide features that protect our products from unauthorized access or use by enforcing passwords. 

Pathway Connectivity does not collect or store personal information on our devices.

WHAT THIS MEANS TO YOU

1.  When using products shipped after January 1, 2020, Pathscape will require a single password to allow configuration of all 

the devices on your network. Since the release of Pathscape V4, all Pathway Connectivity products can be upgraded to 

firmware version 6.x. It is suggested you upgrade your devices to take advantage of the most recent security improvements.

2.  Products shipped before January 1, 2020, devices with version 3.x and 4.x firmware will continue to function without 

passwords using either Pathscape version 3 or 4.

3.  All products shipped after January 1, 2020 may only be configured using Pathscape 4 or later.

4.  Products shipped after January 1, 2020 cannot be downgraded to earlier password-free firmware.

Using the 

Tools > 

 Firmware Updater

 dialog (see later in the manual for instructions), devices manufactured before 

January 1, 2020 may show newer firmware versions, but using the 

Select Latest

 button will not select the latest. These 

devices do not have a method, like a front panel, to factory default them. You can manually select the latest firmware using 

the 

Select Firmware

 button, but do 

not forget the new password

 as you cannot factory default them. 

We highly recommend printing the Password Recover PDF when creating a Security Domain so you can reset 

lost passwords.

5.  Products that are fully configurable from the front panel can enter 

Local Configuration Mode

 (

Read-Only mode

). This 

allows them to be configured locally, but not over the network.

6.  You will be encouraged to print or save a recovery key in case you lose the password. Do so when setting up your Security 

Domain. It is the 

only chance

 you’ll get to save/print/see this Recovery Key.

7.  If you lose the password and lose the recovery key, you will manually have to factory default each device on the network. 

See the resource section of the Pathway website for a comprehensive document describing how to manually factory 

default all our devices.

8.  The complete network configuration may be saved without a password before factory defaulting devices. Applying the 

saved configuration will require a new password to be set for the network.

9.  Configuring our devices to receive unsecured protocols such as sACN and Art-Net will require you to accept the risks. 

See WARNING BOX regarding unsecured protocols below. 

By default, all Pathway Connectivity products sent and/or receive Pathway ssACN which is an authenticated method of 

transporting the E1.31 protocol within a Security Domain.

10.  Pathway does not store personal information such as names or email addresses on our devices.

11.  On products with a front panel display and encoder using firmware release 6.1, it is possible to opt out of the prescribed 

security features. This is not applicable to the PWPP HH P1.

Содержание Pathport PWPP HH P1 XLR5F

Страница 1: ...P1 XLR5F Running Firmware version 6 2 or later Pathport Hand Held DMX RDM Ethernet Gateway 2021 Acuity Brands Inc One Lithonia Way Conyers GA 30012 Pathway Connectivity 103 1439 17th Ave SE Calgary A...

Страница 2: ...ins valuable trade secrets and proprietary information belonging to Pathway and its licensors WARNING ABOUT UNSECURED PROTOCOLS Enabling an open protocol that does not use encryption or authentication...

Страница 3: ...ACING THE BATTERY 3 PANEL LAYOUTS 4 FRONT PANEL 4 LCD 4 BUTTON INTERFACE 4 RJ45 etherCON 5 DMX PORT 5 REAR PANEL 5 HANGING BRACKET 5 BATTERY COMPARTMENT 5 CONFIGURATION 6 SECURITY 7 BACKGROUND INFORMA...

Страница 4: ...ATHSCAPE WITH NEW DEVICES 21 LOCAL CONFIGURATION ONLY Using PWPP HH P1 without Pathscape 22 PATHWAY ssACN Secure sACN 24 DOMAIN AUTO ssACN PASSWORD 24 CUSTOM ssACN PASSWORD 24 CHOOSING PATHWAY ssACN A...

Страница 5: ...ASIC PROPERTIES 41 STATUS 41 DMX512 PORT PROPERTIES 42 PORT PATCH 42 NETWORK DMX PROPERTIES 42 SIGNAL LOSS 43 RDM PROPERTIES 43 PATCHING PORTS 43 UPDATING DEVICE FIRMWARE 44 FACTORY DEFAULT 45 FRONT P...

Страница 6: ...DMX PORT MONITOR 51 RDM TOOLS 52 TEST DMX OUTPUT 53 APPENDIX1 ELECTRICAL COMPLIANCE OTHERINFORMATION 55 ELECTRICAL INFORMATION 55 COMPLIANCE 55 PHYSICAL 55...

Страница 7: ......

Страница 8: ...le at 250K Baud The standard connector type is 5 pin XLR The standard has been revised several times over the years with the latest being ANSI E1 11 DMX512 A 2013 The PWPP HH P1 is designed to work se...

Страница 9: ...signal packets the PWPP HH P1 will route The free downloadable Pathscape software is required to use the PWPP HH P1 as an RDM gateway to configure DMX based equipment INSTALLATION INSTRUCTIONS The PW...

Страница 10: ...drawing less than 5 Watts It will also operate on a standard 9V battery included already installed in device The gateway will automatically sense the presence of PoE and will use it rather than the ba...

Страница 11: ...l enter the menu system If desired the backlight can be set to be always on by setting a property in Pathscape See Software Configuration below for more information BUTTON INTERFACE The three buttons...

Страница 12: ...e port direction can be changed to an Input as well The green LED next to the DMX port indicates active DMX input or output depending on the DMX port direction REAR PANEL Hanging Bracket Included Batt...

Страница 13: ...However we recommend using our free software tool Pathscape when possible To download Pathscape visit the Pathway website For instructions on how to set properties and send transactions to devices ref...

Страница 14: ...password free firmware Using the Tools Firmware Updater dialog see later in the manual for instructions devices manufactured before January 1 2020 may show newer firmware versions but using the Select...

Страница 15: ...their properties and even save a show file with the network setup but the properties are Read Only You will have to login to the domain to set any properties See Login procedure below AMBER PADLOCK Re...

Страница 16: ...e If you wish to configure the device only via the front panel clicking the left button to select SECURE will put the unit into Local Configuration Only mode In this mode the device cannot be added to...

Страница 17: ...main The User can change device properties and save and restore show files but cannot change domain passwords factory default devices or add remove devices There is one User account password for all u...

Страница 18: ...orgotten It is extremely important to keep a record of this Recovery Key as this is the only time it will be shown to you Print the Recovery Key Clicking the Print button will open a Print Dialog from...

Страница 19: ...both the Administrator and User passwords at any time Click Finish and the window will close and the devices will be added to the domain The devices will have an amber padlock and their properties wil...

Страница 20: ...ted and click Finish As security parameters are verified the amber padlocks will turn green and the properties of those devices will be read writable Once logged into a domain the Log In button will c...

Страница 21: ...for the Security Domain and the Domain Administrator Utilities window will appear The Domain Admin Utilities window is broken down into to main sections Manage Security Domain and Manage Devices MANAG...

Страница 22: ...the password when those devices come back online they will coincidently have the same domain name but will be using the old password When logging in there will be two domains with the same name You w...

Страница 23: ...urther changes Note that changing the domain name does not generate a new Recovery Key The original key is still valid as it is only generated at the time of the domain s creation DEVICES IN DOMAIN AD...

Страница 24: ...pear as Ready to Secure The devices can then be added to another domain as needed Note When a device is removed from a domain a window will appear reminding you that any active Network DMX levels will...

Страница 25: ...te that only devices in the Security Domain shown in this dialog box will be available to be defaulted For devices running firmware V4 or below or devices that opted out of security select the device...

Страница 26: ...ator password or it was maliciously changed without your consent you can recover the domain retaining its configuration and set new passwords From the menu choose Security Recover Domain The Reset Dev...

Страница 27: ...istrator Password and click Finish Now you can log into the Domain Administration Utilities Panel using the new Admin password you just specified At this point you can set a new user password as well...

Страница 28: ...Ethernet Devices for detailed instructions Once they reappear in Pathscape as Ready to Secure add them to a Security Domain and log in Once all devices appear with a Green Padlock open the show file a...

Страница 29: ...ecure sACN will not function Pathway ssACN uses the ssACN Password to communicate with other devices on the same Domain In Local Configuration Only mode the device generates a random secret password t...

Страница 30: ...t Panel UI and Menu section for details on how to use the other menu functions WARNING ABOUT UNSECURED PROTOCOLS You are enabling an open protocol that does not use encryption or authentication These...

Страница 31: ...ese transactions will also appear for devices already part of a domain after upgrading those devices to firmware version 6 0 or later NOTE that the Domain Auto password is NOT the same as the Domain p...

Страница 32: ...nt devices to use Pathway ssACN In the relevant devices base device properties there are two sections called Network DMX Receive Protocols and Network DMX Transmit Protocol These are the same sections...

Страница 33: ...n managing ssACN Passwords below MANAGING PATHWAY ssACN PASSWORDS In most situations you will be using the Domain Auto password In these cases after configuring your devices to receive and transmit Pa...

Страница 34: ...e text field To add additional passwords repeat the steps above To delete a password entry click the next to the entry you wish to delete To finish click the button A transaction will be queued in the...

Страница 35: ...o use NOTES ABOUT PATHWAY ssACN A device can only have one TX password at a time You cannot transmit with multiple TX passwords However receive devices as shown above can accept any number of differen...

Страница 36: ...RK SETUP PLEASE NOTE Before any configuration and network setup can be done including setting the IP the PWPP HH P1 must be added to a Security Domain If the device is not added to a Security Domain i...

Страница 37: ...e Security Domain the device is currently assigned to BASIC PROPERTIES IDENTIFY DEVICE Checking this box causes device to commence identify behavior flashing LCD backlight DEVICE NAME A user configure...

Страница 38: ...ame of the NIC Network Interface Card the device is communicating to the machine running Pathscape on FIRMWARE VERSION Shows current operating firmware version See the Firmware Update section on how t...

Страница 39: ...K PROPERTIES IP ADDRESS Internet Protocol address IPv4 of the Gateway SUBNET MASK User configured subnet mask Typically 255 255 255 0 but must be set according to general networking rules GATEWAY Spec...

Страница 40: ...er the Partner MAC will be shown Read only PARTNER PORT If the upstream switch supports Link Layer Discovery Protocol LLDP the port the current device is connected to will be shown here Read only NETW...

Страница 41: ...cured protocols you must acknowledge that you have read this statement and accept these risks After checking this box and sending the transaction a dialog will appear warning you of the above and aski...

Страница 42: ...red Pathport Protocol Art Net will use transmit using unsecured Art Net Strand ShowNet will use transmit using standard unsecured E1 31 sACN E1 31 sACN will use transmit using standard unsecured E1 31...

Страница 43: ...supported protocols to DMX512 Output ports may also be configured to be RDM controllers There are two tables of properties based on Port Direction OUTPUT PORT PROPERTIES BASIC PROPERTIES SUBDEVICE NA...

Страница 44: ...tream is present and Inactive if Network DMX stream is lost Read only DMX512 Shows activity of the hard DMX512 Port Will show Active when actively transmitting DMX512 and Inactive when it is not Read...

Страница 45: ...he crossfade time as defined above in Crossfade Enable PORT PATCH OUTPUT PATCH Use the drop down menu to select the output patch for the port By default the drop down menu lists standard Universes 1 1...

Страница 46: ...ting the last received packet indefinitely in the event of Network DMX signal loss HOLD TIME s If Signal Loss Fade to Black or Signal Loss Port Shutdown is enabled the port will continue outputting th...

Страница 47: ...devices on this port discovery can take anywhere from a second to several minutes Turning on Background Discovery allows the Gateway to keep an up to date list of which devices are online vs offline...

Страница 48: ...l a port based on where the DMX512 cable is coming from i e Console Port 3 or House Lights SUBDEVICE NOTES A user configured text description field shown in the Device window STATUS NETWORK DMX Shows...

Страница 49: ...down menu to select Enabled or Disabled PORT DIRECTION Input or Output This table shows the properties of an Input port PORT PATCH NETWORK DMX TX UNIVERSE Specify the Network DMX Universe on which to...

Страница 50: ...nd 200 where 200 is the highest priority possible This property is only visible if the above property sACN Transmit Priority Slot is set to 0 disabled SIGNAL LOSS HOLD TIME s If the DMX512 source ceas...

Страница 51: ...Select the device s you want to upgrade and click the button at the bottom of the window The latest firmware version will be shown in the table next to Current Click the button and wait for the progre...

Страница 52: ...nge the value to Enabled to complete the Factory Default process Press the EDIT button and then press the UP or DOWN button to change the value to Enabled then press the NEXT button Disabled EDIT ESC...

Страница 53: ...o configure the device see next section If set to Local Configuration Only Read only mode or the security features are Disabled some functionality will not be available such as Pathway ssACN Pathway s...

Страница 54: ...sACN is not available To use other standard unsecured protocols you must manually enable them see below As explained above you cannot use Pathscape to configure the device in this mode MAIN DISPLAY M...

Страница 55: ...property and then press the NEXT button Finally press the SAVE button to accept any changes made or press the ESC button to return without making changes The menu will time out after 30 seconds and re...

Страница 56: ...Disabled enabling this will have no effect ShowNet RX Enable or Disable default the receiving of Strand ShowNet If Allow UnsecureRX is Disabled enabling this will have no effect ETC Net2 RX Enable or...

Страница 57: ...t Patch using Pathscape its name will be shown here as Custom patch name Note the custom patch name may be truncated due to the character limit on the LCD NOTE that you cannot select or create Custom...

Страница 58: ...each octet Currently selected octet will flash Press NEXT button to move to next octet After setting the last octet press NEXT again to SAVE changes or ESC to cancel NOTE When IP Mode is set to Dynami...

Страница 59: ...ption RDM Devices Find ESC Press the FIND button to begin discovery of RDM enabled devices connected to the DMX port Once discovery is complete the total number of devices found will be reported RDM D...

Страница 60: ...elect the desired DMX slot to test To select ALL slots press DOWN once Chan All will be shown Press NEXT Chan 1 Lev 0 UP FADE ESC Lev 0 will then appear indicating DMX Level Press and hold the UP butt...

Страница 61: ...PWPP HH P1 Manual October 2021 54...

Страница 62: ...t COMPLIANCE ANSI E1 11 DMX512 A R2013 ANSI E1 20 RDM Remote Device Management ANSI E1 31 streaming ACN Art Net Strand ShowNet Pathway ssACN ANSI E1 33 RDMnet RDM over IP IEEE 802 3af Power over Ether...

Отзывы: