Deployment Guideline; Upgrading; Backup/Restore; Malware Prevention Solution - ABB Welcome IP H8236 Series Product Manual

10.3

Deployment guideline

Please do not install it within a public place and to ensure that physical access to the devices is
granted only to trusted personal.
All devices need to work in security mode by default and. all devices in one system shall be
signed by a public CA at commissioning stage, normally management software works as CA.
It's suggested compatible mode only be used when device need to communicate with previous
generation products. In this mode, data transmission between devices are not encrypted, it may
lead to data leaks and has the risk of being attacked.
When user decide to remove the device from system, user shall reset the device to factory
setting in order to remove all the configuration data and sensitive data in the device. This will
prevent sensitive data leak.
It is recommended to apply "MAC filter" and "Rate limiter" in the switch to prevent DOS attack.
10.4

Upgrading

Device supports firmware updating via SD card, in this mode, a signature file will be used to
verify the authentication and integrity of firmware.
If Internet services available, device will connect to MyBuildings sever to get new firmware
automatically but needs to be confirmed by end user every time. A signature file will be used to
verify the authentication and integrity of firmware.
10.5

Backup/Restore

Some configurations of device can be exported to SD card for backup purpose, and on later
use, imported it again to restore configuration.
When connect to management device, user can backup and restore configurations on
management device side, this feature is enabled or disabled by a local setting item.
10.6

Malware prevention solution

The device H8236 is not susceptible to malware, because custom code cannot be executed on
the system. The only way to update the software is by firmware upgrading. Only firmware
signed by ABB can be accepted.
10.7

Password rule

The user needs to change the engineering password when entering the engineering settings for
the first time. This engineering password is not allowed continuously increasing or decreasing
numbers (e.g. 12345678, 98765432). And three consecutive identical numbers are also not
allowed. (e.g. 123444, 666888)
Your passwords could not be known by the others to guarantee the security.
Product manual 2TMD041800D0002
Cyber security
│270