Factory access examples

Scenario 1

This example illustrates how factory access functions on a device using standard security, with a Factory Access Minutes setup register value of 10, over a protocol that is not session-based.

NOTE: A protocol that is not session-based actively communicates login credentials while you are connected to the device (for example, ION).

  1. The user pushes a front panel button on the device (T=0). This starts the factory access duration of ten minutes.
  2. Two minutes after the button press (T=2), Schneider Electric Technical Support requests factory-level access to the device, with the correct login credentials, over ION. Factory-level access is granted.
  3. Ten minutes after the button press (T=10), factory-level access expires, and the user is automatically logged out.

Any attempt to connect to the device using factory-level access is now denied.

NOTE: With protocols that are not session-based (for example, ION), the access expires when the time since the factory access was activated equals the duration specified in the Factory Access Minutes setup register.

Scenario 2

This example illustrates how factory access functions on a device using advanced security, with a Factory Access Minutes setup register value of 5, over a serial port (a session-based protocol).

  1. The user connects to the device using ION Setup with Supervisor-level access.

    2. – In the advanced security wizard, he enables the Factory user.

    – In the Communications tab, he sets the protocol of the appropriate serial port to Factory.

  2. The user power cycles the device (T=0). This starts the factory access duration of five minutes.
  3. Two minutes after the power cycle (T=2), Schneider Electric Technical Support requests factory-level access to the device, with the correct login credentials, over the serial port. Factory-level access is granted.
  4. An hour after the power cycle (T=60), Schneider Electric Technical Support logs off factory-level access.

    5. NOTE: With protocols that are session-based, once factory-level access has been granted, it does not matter if the logged-in time exceeds the value of the Factory Access Minutes setup register.

    The factory-level access period has expired and must be restarted by pushing one of the device’s front panel buttons, power cycling the device, or modifying the Factory Access Minutes setup register.

  5. The user connects to the device using ION Setup with Supervisor-level access.

    6. – In the advanced security wizard, he disables the Factory user.

    – In the Communications tab, he changes the serial port protocol from Factory back to its original setting.

Scenario 3

This example illustrates how remote factory access functions on a device using advanced security, over a protocol that is not session-based.

NOTE: A protocol that is not session-based actively communicates login credentials while you are connected to the device (for example, ION).

  1. The customer contacts Schneider Electric Technical Support to request that they connect to a device using factory-level access using the following information:

    2. – the username and password of an advanced security user that has device security configuration access, and the front panel password of the device.

    – the device’s Ethernet connection information.

  2. Technical Support connects to the device using ION Setup, entering the advanced security username and password provided.

    3. – In the advanced security wizard, he enables the Factory user.

    – Using the advanced mode of ION Setup, he changes the Factory Access Minutes setup register from 0 (default) to 30 (T=0).

  3. Two minutes after editing the Factory Access Minutes setup register (T=2), Schneider Electric Technical Support requests factory-level access to the device, with the correct login credentials, over HTTP. Factory-level access is granted.
  4. Twenty minutes after editing the Factory Access Minutes setup register (T=20), Schneider Electric Technical Support finishes working on the device and logs off factory-level access.
  5. Technical Support connects to the device using ION Setup, entering the advanced security username and password provided.

    6. – In the advanced security wizard, he disables the Factory user.

    – Using the advanced mode of ION Setup, he changes the Factory Access Minutes setup register back to 0 (zero).

Schneider Electric Technical Support contacts the customer to indicate they are finished working on the device and have restored the security settings, and recommends that the customer update their advanced user password information and store their password information and device security configuration file in a secure location.