Setting up standard or advanced security
Using Advanced security mode is recommended because it has stronger user login, user privilege management, and password complexity.
The following table describes the security capabilities for each security mode:
Security capability | Security configuration option | Standard security mode | Advanced security mode |
---|---|---|---|
User credentials and password robustness | Use a single account to access the meter with a numeric password for login. | ● | |
Create multiple user accounts with alphanumeric passwords for login and configuration changes. | ● | ||
Password strength feedback using ION Setup. | ● | ||
User account lockouts and timeouts | Define user account lockout criteria after unsuccessful login attempts and define session timeout length. | ● | ● |
User privileges | User accounts with variable permissions to read access, test mode or configuration privileges. | ● | |
Webpages | Disable or enable webpages for viewing meter data online using a web browser (Active Web Server). | ● | ● |
Configuration |
Disable or enable ability to configure the meter using:
|
● | ● |
Disable and enable time synchronization. | ● | ||
Password required for configuration changes using the display or communication protocols. | ● | ● | |
Cybersecurity event logs and reports | Set-up cybersecurity event logs and alarms using event priorities. | ● | ● |
Required for this procedure:
- Meter connection using ION Setup.
- Login credentials.
To set up standard or advanced security:
- Open ION Setup > select the meter > Setup Assistant.
- Security > Security Mode > Edit. The Open Security Configuration file dialog box opens.
- Select the default standard.scf or advanced.scf security configuration file.
- Click Open. The Standard Options or Advanced Options dialog box opens.
- On the Standard or Advanced Options dialog box:
- Select or clear Web Server to enable or disable the ability to view meter data online using webpages.
- Select or clear Allow Modbus programming to enable the ability to program some meter settings using Modbus.
- Select or clear Allow Front Panel programming to enable or disable the ability to change meter settings using the display.
- Click Next to go through Setup Assistant screens and select the security
options you want.
- See Passwords for recommendations.
- See Managing user account lockouts and timeouts for details about lockouts after unsuccessful login attempts and ION protocol session timeouts.
- See Managing user accounts for details about adding users and assigning privileges.
- Click Finish. The Save As dialog box opens.
- Click Yes. The Save As dialog box opens.
- Save the file with a unique file name to avoid overwriting default Security Configuration Files.
- Click Exit.
If an option is grayed out, it is not available with your meter type or firmware.