Cybersecurity configuration

Your device comes with security features that you can configure to help protect against unauthorized configuration and access to your device’s data through its user interfaces or communications.

These features arrive in a default state and can be configured for your installation needs. Please note that disabling or modifying settings within the scope of these individual features can impact the overall security robustness of the device and ultimately the security posture of your network in either positive or negative ways.

SCF file

Security configuration settings selected in ION Setup are applied to the meter and can be saved as a Security Configuration File (.scf). The security log file (SECURITY.LOG) contains the history of Security Configuration Files saved from ION Setup.

The security log and Security Configuration Files are saved to the C:\ProgramData\Schneider Electric\ION Setup\Security folder.

NOTE: The security log file can be changed by anyone with access to the ProgramData folder.

Recommendations to optimize cybersecurity in a protected environment:

• Change the Standard Security mode default password and use Advanced Security mode. See Passwords for more information.
• Store your meter’s Security Configuration File (.scf) in a protected location.
• Revenue-lock the meter, confirm it is revenue-locked and use anti-tamper sealing points before putting the meter into service. This helps prevent unauthorized access to the meter, parameter values and settings. See Scaled operational values and Anti-tamper sealing methods for more information.