
2
017-
03
68
Configuration via Web Interface
5.5.4
Security: Access Control List, Temporary Join Key
Whitelist for Access Control
The WirelessHART gateway supports the "whitelist" security mode. The whitelist is an
additional security feature to ensure that only authorized personnel can add a new device. For
example if an external company sets up the network by using this feature, this can help to
ensure that no further changes in consequence of the setup take place.
New WirelessHART devices can only be added to the network provided that their addresses
are listed in the whitelist and can be identified.
If needed, you can manipulate the join key as follows:
■
Change the join key permanently for all devices connected to the network. For more
information on the join key, see chapter 5.2.1.
■
Define a temporary join key that is automatically invalidated after a defined period of time.
This can be used for temporary devices needed for maintenance reasons.
You can monitor the process of this change until the join key has been successfully
manipulated as required.
Defining or Changing a Whitelist
1. Go to Engineering > Security.
2. In order to copy the network to the whitelist, click on
Transfer Network to Whitelist
-
A confirmation request dialog opens: The whitelist will be changed. The current whitelist
is flushed and cannot be recovered.
3. Confirm with
Yes
.
The new devices in the whitelist table are check marked. The whitelist is changed: The
specified devices in the device list below receive a "Whitelisted" check mark (1).
The whitelist is generated.
4. Next, set the Network Access Mode pull-down menu from
Open
to
Whitelist
and confirm
with
OK
.
Now, only the listed devices that are check-marked as whitelisted can join and re-join the
network.
Any attempts to enter the network, even with a valid network ID and join key, in order to add
an unauthorized device will be rejected.
The network is logged.
1