earth_america
user_standard 登录
action_search_stroke
earth_america
登录以评价并提供反馈 1 2 3 4 5 登录以评价
0
概念

概念


产品： Operator Display
功能： 硬件
产品版本： 3.3, 2022, 2023, 2024, 7.0
2021/7/22

Operator Display Hardening

arrow1_rotationHardening Specifics arrow1_rotationProduct Defense in Depth arrow1_rotationSystem Defense in Depth

There are specific security hardening recommendations to follow when installing Operator Display.

Hardening Specifics

The Operator Display touch screen is used to authenticate users via user name and password.

通知

POTENTIAL COMPROMISE OF SYSTEM AVAILABILITY, INTEGRITY, AND CONFIDENTIALITY

Do not install the device where password entry may be monitored by humans or cameras.

Failure to follow these instructions can result in loss of data or unauthorized system access.

Product Defense in Depth

Operator Display communicates via BACnet/IP over Ethernet cabling. BACnet relies on the physical security of the Ethernet network. Ethernet cabling must not be physically accessible to possible attackers. The rear of Operator Display contains ports that must not be physically accessible to the public.

通知

POTENTIAL COMPROMISE OF SYSTEM AVAILABILITY, INTEGRITY, AND CONFIDENTIALITY

  • Install the Ethernet cables inside wall cavities, or in conduit.

  • Install Operator Display in a way that only authorized people can access the rear of the device, for example, on a locked cabinet or using a secure wall box.

Failure to follow these instructions can result in loss of data or unauthorized system access.

System Defense in Depth

All system components that may be used to integrate Operator Display must be secured.

通知

POTENTIAL COMPROMISE OF SYSTEM AVAILABILITY, INTEGRITY, AND CONFIDENTIALITY

Install routers, switches, or hubs that may be needed for interconnection of Operator Display to be accessible by authorized personnel only.

Failure to follow these instructions can result in loss of data or unauthorized system access.

请参阅

  • Hardware Overview
  • Operator Display