ABB COM600 series 5.0 Cyber Security Deployment Manualline page 22

22
COM600 series 5.0
Cyber Security Deployment Guideline
needs to be loaded into COM600, and leave it disabled other-
wise. This allows a tighter control for managing the configur-
ation loaded into COM600.
To control Configuration Service from WebHMI:
1. Login to COM600 WebHMI as an admin user.
2. Select Communication tab.
3. Select Security settings node from the communication tree.
4. Select Configuration service child node.
5. Select
• Configuration service disabled option to disable Configuration Service.
•
Configuration service enabled option to enable Configuration Service.
•
Click Apply.
Figure 3.2.4-1 Enable COM600 Configuration Service
Configuration Service can use any one of the two built-in NICs available in COM600
to listen for any incoming connection requests to perform Gateway Management. By
default, Configuration Service is preconfigured to use LOCAL NIC.
Although Configuration Service can be changed to use REMOTE NIC, ABB recommends
that LOCAL NIC is used for Gateway Management purposes. Allowing Configuration
Service to use REMOTE NIC implies that this service is available for remote connection
from entities which may be located outside the physical perimeter of COM600.
Configuration Service should be reconfigured whenever there
is a change in IP Address of the NIC to which it is associated.
1MRS758267
Enable_COM600_Configuration_Service.png