Eaton SPC Max Series Installation Instructions Manual page 13

Installation instructions for
SPC Max Series surge protective device
Figure 21. Password screen
Then it will return to the overview screen .
Password security: The Power Xpert SPD is shipped with factory
default user authentication credentials to allow for initial installation
and configuration . However, factory default authentication
credentials are often well known, easily discoverable, and present
a significant security risk; therefore, the admin user name and
admin password should be changed at installation to increase
cybersecurity protection .
1. Limit access to the PX-SPD to reduce cybersecurity risk .
2. The maximum number of users that can be setup is six .
3. User names should be five characters in length or more .
4. Password expiration is configurable; the default is set to
90 days .
5. Up to three users can access the PX-SPD simultaneously .
Admin users assign a role to new users from one of four possible
roles under the User Management tab through the web UI .
Table 3. User role privileges
Role Description IP Addr
Admin All privileges R/W
Engineer Product R/W
configuration
Operator Read only R
Viewer Read only R
R—Read access
W—Write access
IP Addr—IP Address configuration
Modbus TO—Modbus timeout value
User/Pass—Username and password setup
Factory
Modbus TO User/Pass Reset
R/W R/W R/W
R/W
R
R
PX-SPD enforces complex passwords and session time-out through
User Management tab in the web UI .
There are four levels of password complexity, defined as follows:
•
Password complexity level—0
•
It should be at least 6 characters long
•
It should not match with user name, full name, or
existing password
•
Password complexity level—1
• It should be at least 8 characters long
•
It should not match with user name, full name, or
existing password
•
It should contain at least 1 alphabetic and 1 numeric character
•
Password complexity level—2
• It should be at least 12 characters long
• It should not match with user name, full name, or
existing password
• It should contain at least 1 alphabetic character,
1 numeric character, 1 special character, and 1 uppercase
alphabetic character
•
Password complexity level—3
• It should be at least 16 characters long
•
It should not match with user name, full name or
existing password
•
It should contain at least 2 alphabetic characters,
1 numeric character, 2 special characters, and 1 uppercase
alphabetic character
Admin Users: It is mandatory to provide password complexity level
when creating a new user .
The change password window will open . Enter the default password
and then enter a new 6-digit alphanumeric password and then click
OK . Save password in a secure location to access the web UI . If lost,
contact Eaton's application engineers at 1-800-809-2772 or email
SPD@eaton.com .
Establishing a secure connection
After initial login, the user will notice that the address bar on
the web browser shows that the connection is not secure . See
example below .
Reboot
R/W
To obtain a secure connection, click on the Network tab, and then
select Download Certificate .
Figure 22. Download certificate
Download the certificate file cert .cer and then open it .
Instruction Booklet IB158002EN
Effective September 2023
EATON www.eaton.com
13