System Security; Passwords And Privilege Levels - Legacy Mode - GE PACSystems RXi User Manual

System Security

5.9
The PACSystems CPU supports the following two types of system security:
■
Passwords/privilege levels
■
OEM protection
With firmware releases 7.80 and later, RXi Controller provides full support for Enhanced
Security Passwords, which provides a more secure mechanism for setting and authenticating
passwords and OEM keys.
For Enhanced Security operation, refer to page ICRXICTL000, GFK-2816, GFK281691. A
summary of operational differences between the two modes is provided on page
ICRXICTL000, GFK-2816, GFK281692.
5.9.1 Passwords and Privilege Levels – Legacy Mode
Passwords are a configurable feature of the PACSystems CPU. Their use is optional and can
be set up using the programming software. Passwords provide different levels of access
privilege for the CPU.
The default state is no password protection. Each privilege level in the CPU may have a
unique password; however, the same password can be used for more than one level.
Passwords are one to seven ASCII characters in length. Passwords can be changed only
through the programming software.
After passwords have been set up, access to the CPU via any communications path is
restricted from the levels at which the passwords are set, unless the proper password has
been entered. Once a password has successfully been accepted, access to the highest
privilege level requested and below is granted (for example, providing the password for
level 3 allows access to functions at levels 1, 2, and 3).
Privilege Levels
Level
4
3
2
1
GFK-2816F
Password
Yes Write to configuration or logic. Configuration may only be written in Stop mode; logic
may be written in Stop or Run mode. Set or delete passwords for any level.
Note: This is the default privilege for a connection to the CPU if no passwords
are defined.
Yes Write to configuration or logic when the CPU is in Stop mode, including word-for-word
changes, addition/deletion of program logic, and the overriding of discrete I/O.
Yes Write to any data memory. This does not include overriding discrete I/O. The CPU can
be started or stopped. CPU and I/O fault tables can be cleared.
Yes Read any CPU data, except for passwords. This includes reading fault tables,
performing datagrams, verifying logic/configuration, loading program and
configuration, etc. from the CPU. None of this data may be changed. At this level,
Run/Stop mode transitions from the programmer or the IDM are not allowed.
Access Description
August 2015
Chapter 5. CPU Operation
89