Table of Contents
Advertisement
10.3
Deployment guideline
All devices need to work in security mode by default and all devices on one system are to be
signed by a public CA at commissioning stage; normally management software acts as the CA.
It is suggested that compatible mode is only used when the device needs to communicate with
previous generation products. In this mode, data transmission between devices is not
encrypted, may lead to data leaks and has the risk of being attacked.
When the user decide to remove the device from system, the user shall reset the device to the
factory settings in order to remove all the configuration data and sensitive data on the device.
This will prevent sensitive data leaks.
It is recommended to apply "MAC filter" and "Rate limiter" in the switch to prevent DOS attacks.
10.4
Upgrading
Device supports firmware updates via management software, a signature file will be used to
verify the authentication and integrity of firmware.
10.5
Backup/Restore
None.
10.6
Malware prevention solution
The H8138.T-. device is not susceptible to malware, because custom code cannot be executed
on the system. The only way to update the software is via firmware upgrades. Only firmware
signed by Busch-Jaeger can be accepted.
10.7
Password rule
The user must change the engineering password when accessing the engineering settings for
the first time. This engineering password must not include continuously increasing or
decreasing numbers (e.g. 12345678, 98765432), and three consecutive identical numbers are
similarly not permitted (e.g. 123444, 666888).
Product manual 2TMD041800D0008
Cyber security
│43
Advertisement
Table of Contents
