Factory-Shipped State; Secure Storage And The Sd Card - LG MultiSITE VM3 Startup Manual

Factory-shipped state

The factory-shipped state of a controller has the following default settings for IP address, HTTP port and Platform credentials.
IP address
When shipped, a new MultiSITE VM3 controller is pre-configured with an IPv4 address in the range:
192.168.1.140 (primary "LAN1" port; the "LAN2" port is disabled). The default subnet mask is: 255.255.255.0.
You change these IPv4 network settings during your startup commissioning of the MultiSITE VM3.
HTTP port for platform access
When shipped, the MultiSITE VM3's platform daemon is configured to listen on HTTPS port 5011. Often, this is left at default. However, if
a different port is needed for a platform connection (perhaps for fire wall reasons), you can change this during the commissioning of the
MultiSITE VM3.
Platform daemon credentials
Any MultiSITE VM3 controller is shipped with default platform daemon (administrator) credentials.
Initially, you use these default credentials to open (login) a platform connection to the MultiSITE VM3. Like the factory-assigned IP address,
default credentials are temporary. During your startup commissioning, you must replace this platform admin account with at least one differ-
ent platform admin user. Be sure to guard the credentials for such platform users closely.
Note:
The Niagara 4 Commissioning Wizard does not allow you to commission and startup a controller while retaining the factory platform user.

Secure storage and the SD card

On a MultiSITE VM3, the SD card is the primary storage media for all data and configuration related to the software installation. Since the SD
card can be easily removed and the data duplicated, the sensitive data is encrypted when stored on the card. Files are stored in encrypted
format, but decoded on the fly as they are accessed.
Sensitive data includes the following:
• Credentials for accessing a WiFi network
• Niagara key material
• Private key files
• OS account credentials
The system is designed in a way that protects this data, while at the same time allowing you to move an SD card from a unit that suffered a
hardware failure to a new unit with minimal effort.
In this scenario, the SD card inserted into the replacement unit contains the system passphrase for the original unit, which does not match
the one in the replacement unit. This results in the boot sequence failing due to the passphrase mismatch (indicated by Stat LED flashing
with a 50% duty cycle with a 1 second period).
You are then prompted to enter the system passphrase (for the original unit which is stored on the SD card) via serial connection. You must
first authenticate with platform credentials, before you can update the system password.
Note:
Pre-configuring (via serial connection) the replacement MultiSITE VM3 unit with a system passphrase matching the one stored on the SD
card (swapped out of the other unit) facilitates commissioning the replacement unit. In this situation, the commissioning process does not
prompt for a passphrase since it detects a passphrase match.
Due to our policy of continuous product innovation, some specifications may change without notification.
©LG Electronics U.S.A., Inc., Englewood Cliffs, NJ. All rights reserved. "LG" is a registered trademark of LG Corp.
COMMISSIONING OVERVIEW
11