Data Safety Information; Security Considerations For Your Network; Enforce A Strong Password Policy - Honeywell enCore Series Manual

2

2.8 Data safety information

2.8.1

Security considerations for your network

enCore devices are used in modern accounting infrastructures and network control
technology with the task of transmitting process information such as counters,
measurements, and messages to an accounting center or control station. Such a
connection represents a significant security risk and therefore careful con-
sideration must be given to the design.
Reporting a security issue to Honeywell
As soon as you encounter a possible security gap of a Honeywell
product, please report it directly to Honeywell.
12.5 How to report a security vulnerability
➪
2.8.2

Enforce a strong password policy

There are different attacks on passwords today, so you should follow the best prac-
tices for managing your passwords. Here are some best practices:
Always change default passwords.
l
Choose strong passwords
l
Use a combination of uppercase and lowercase letters, numbers, and special
characters when assigning a password. In addition, protection increases with
the password length. A strong password consists of at least 8 characters.
Change passwords on a regular basis.
l
Change passwords immediately in case someone has tried to attack the
l
system.
Document deviations of the best practices
If the system does not allow one of the best practices to be followed this
should be documented. For example: maybe you do not allow the special
character "=" in the password.
Assign passwords
enCore devices are delivered with standard users without password. We
recommend to assign passwords for administrator and all main users
during commissioning.
GasLab Q2
Safety information (EN-US-FRA)
User Manual (N )
(p. 294)
39 of 315