Security Instructions; Common Security Threats; Tips To Mitigate Security Risk - Honeywell STX Programming Manual

7. Security Instructions

This section lists the few security guidelines and tips that you must follow for the Honeywell
MorleyIAS Fire Panels.
NOTE: These are the tips that Honeywell recommends, but is not limited to. If you find any security
vulnerability, report it to security@honeywell.com.
7.1

Common Security Threats

Some of the common security threats that may affect the Honeywell MorleyIAS Fire panel
devices.
1. Change the default passcode (level 3 & level 4) when using the panel for the first time
and keep the passcode safely.
2. Install the panel in a secure area and allow only authorized personnel to access and
operate.
3. Ensure to restore the device to factory settings to avoid disclosure of sensitive
information if it is replaced.
4. Refresh the passcodes once in 90 days.
5. Format the USB storage device before performing import/export any file.
6. Use only Honeywell approved BLE Dongle (HONBLEKIT2).
7. Do not share BLE pairing key with others, remove the BLE Dongle from the panel once
the operation completed.
8. Some of the common security threats that may affect the Honeywell SmartConfig
Mobile App that runs on Android devices.
7.2

Tips to Mitigate Security Risk

Following are the tips that you can use to mitigate the potential security risk to your mobile
devices:
1. Make sure that the Honeywell SmartConfig Mobile App is used in a trusted or isolated
environment.
2. Avoid installing the SmartConfig Mobile App on the phone which has been rooted.
3. Download the Honeywell SmartConfig Mobile App only from a trusted source (Google
Play Store).
4. Bluetooth should not be turned on when not in use as apps can use lots of data without
any intimation.
5. Update the new version of the SmartConfig Mobile App periodically.
6. Keep your mobile phone up to date and install a good antivirus software to scan your
mobile periodically.
44
Security Instructions