Security Recommendations - Siemens SIMATIC RF1000 Operating Instructions Manual

Security recommendations

To prevent unauthorized access, observe the following security recommendations when
working with the reader.
General
• Check regularly that the device complies with these recommendations and/or other internal
security policies.
• Evaluate your plant as a whole in terms of security. Use a cell protection concept with suitable
products.
• Keep the software up to date. Always use the latest firmware/software version of the device.
Check regularly for security updates of the products and use them. After the release of a new
version, previous versions are no longer supported and are not maintained.
Information regarding product news and new software versions is available at the following
address:
Link: (https://support.industry.siemens.com/cs/ww/en/ps/24224)
• Use the device only for system access control (and not for physical access control).
Physical access
• Restrict physical access to the device to qualified and authorized personnel.
• Restrict access to the configuration cards to qualified and authorized personnel and log their
release.
Security functions
• Only enable functions that you actually need to use the device. Note that, in the factory
setting, all transponders and card types listed below are recognized.
• Make sure that the configuration files are adequately protected. You can, for example,
digitally sign and encrypt the files, store them at a safe location or transfer configuration files
only via secure communication channels.
Certificates and keys
• Before sending the device to Siemens for repair, restore the factory settings.
• Make sure that the data stored on the transponders/cards is encrypted and that decryption/
encryption of the data takes place on the connected devices.
Firmware/software
Make sure that only firmware created by Siemens is loaded to the device.
SIMATIC RF1000
Operating Instructions, 05/2023, C79000-G8976-C432-10
2
7