Protecting access to HMI devices

The following operations are password protected on the HMI device:

• JMobile HMI Runtime management: install JMobile HMI Runtime and update JMobile HMI Runtime
• Board management: replace main BSP components such as Main OS, Configuration OS, Bootloader, and so on
• Download and upload of project files
• Optional services on Linux devices (e.g. SSH Protocol, VNC Server)

 

WARNING: For security reasons

• Change the default passwords (See: "Password protection" for HMI devices on Linux platform, "Changing password on HMI device" for HMI devices on Win32 platform)
• Enable security management (See: "Enable/disable security management")
• Force remote login (See: "Force remote login")
• Configure the Context Menu to be accessible only using a "macro". In this way, it is possible to configure the use of the macro to authorized users only. (See "Runtime")

 

WARNING: Unauthorized access to the device can cause damage or malfunctions. When connecting the device to a network protect the network against unauthorized access.

Measures for protecting the network include:

• Firewall
• Intrusion Prevention System (IPS)
• Network segmentation
• Virtual LAN (VLAN)
• Virtual Private Network (VPN)
• Security at physical access level (Port Security).

Further information, guidelines and standards regarding security in information technology: IEC 62443, ISO/IEC 27001.