ABB COM600 series 5.0 Cyber Security Deployment Manualline page 15

1MRS758267 COM600 series 5.0
Cyber Security Deployment Guideline
To launch Local security policy editor:
1. Login to COM600 as administrator.
2. Go to Control Panel.
3. Click Administrative tools.
4. Click Local Security Policy. Local security policy editor opens.
5. Browse through each of the policies and make appropriate settings to align with the
desired security behavior.
In addition to local security policies, there are domain security policies which become
applicable when COM600 is added to a domain. Domain level security policies reflect
the same set of local security policies, except that they are defined for a common group
of devices managed centrally through a domain controller. Domain security policies are
typically managed by a domain level system administrator. It is important to note that
whenever COM600 is added to a domain, the settings made for security policies at
domain level always override the settings made to local security policies.
Security policies related to passwords and account lockout behavior are configured by
default and only reflect the minimum configuration that can be done at factory. It is
recommended to configure all applicable security policies, which may better align with
specific security needs for the environment in which COM600 is commissioned.
Password policy
Figure 3.1.5-1 shows the default settings for Password security policy.
preconfigured_password_policy.png
Figure 3.1.5-1 Preconfigured password policy
Account Lockout policy
Figure 3.1.5-2 shows the default setting for Account Lockout security policy.
15