earth_america
user_standard Log on
action_search_stroke
earth_america
Log on to rate and give feedback 1 2 3 4 5 Log on to rate
0
How to

How to


Products: AS-B, Enterprise Central, Enterprise Server, AS-P, Virtual Project Servers, WebStation
Functionalities: Security
Product version: 2022
12/15/2022

Configuring Security in WebStation using WorkStation

You can configure the security for WebStation using WorkStation.

Show More
action_close

For security reasons, the default configuration for WebStation is, for example, not to allow external content to be embedded.

The default configuration can be changed in the Security Settings in WorkStation or in the System Security tab in the Options menu.

Enable external websites to be embedded into WebStation

You can enable external websites to be displayed in WebStation. By selecting this option any website can be embedded.

Lists external websites sites that are allowed be embedded into WebStation

You can make a whitelist of websites that are allowed to be embedded in WebStation. An empty whitelist allows no sites to be embedded. The whitelist is used together with the HtmlPage object if you only want a small selection of WebSites be embedded and not open for all as the "Enable external websites to be embedded into WebStation" option.

When you upgrade a system to version 1.9 or later, any embedded non-WebStation contents open in a new tab or window in our web browser. A link to a report, hyperlink, or document in a workspace in WebStation opens the contents in a new tab.

Enable WebStation to be embedded in another website

You can enable WebStation to be embedded in other sites.

Website to allow access to WebStation when embedded

Address of the site that embeds WebStation.

Enable WebStation to use unsafe string evaluated JavaScript methods

Enable the graphic viewer in WebStation to use unsafe string evaluated JavaScript methods like ‘eval’.

HSTS

To increase security, you can enforce the web browser to only connect to WebStation using HTTPS. This is done using HTTP Strict Transport Security (HSTS).

To configuring Security in WebStation using WorkStation
  1. In WorkStation, in the System Tree pane, select the EcoStruxure BMS server you want to configure.

  2. Click the Control Panel tab.

  3. Click Security Settings

  4. Configure the security settings.

    Property

    Description

    Enable external websites to be embedded into WebStation

    Select if you want external content to be embedded in WebStation. For more information, see Security Configuration in WebStation .

    Lists external websites that are allowed to be embedded into WebStation

    You can make a whitelist of websites that are allowed to be embedded in WebStation. An empty whitelist allows no sites to be embedded. The whitelist is used together with the HtmlPage object if you only want a small selection of WebSites be embedded and not open for all as the "Enable external websites to be embedded into WebStation" option.

    Enable WebStation to be embedded into another site

    Select if you want WebStation to be embedded in another web site. For more information, see Security Configuration in WebStation .

    Website to allow access to WebStation when embedded

    Address of the site that embeds WebStation. For more information, see Security Configuration in WebStation .

    Enable WebStation to use unsafe string evaluated JavaScript methods

    Select if you have graphics written in older versions of EBO that cannot be displayed in 3.0 or later. For more information, see Cannot Open Graphics in WebStation .

    Enable HSTS pre-load list

    Select to enable HSTS pre-load list. For more information, see Security Configuration in WebStation .

    HSTS pre-load list max-age

    Enter the time the HSTS pre-load list is valid. For more information, see Security Configuration in WebStation .

  5. Click the Save button

     
    action_zoom_plus_stroke
    .

  • Security Configuration in WebStation
  • Configuring Security in WebStation using WebStation
  • Security Settings – Control Panel