The .Csipasswd File - Campbell CR300 Series Product Manual

Secure the physical data logger and power supply under lock and key.
WARNING:
Some security features can be subverted through physical access to the data logger. If
absolute security is a requirement, the physical data logger must be kept in a secure location.
Some options to secure your data logger from mistakes or tampering include:
Setting a PakBus/TCP password. The PakBus TCP password controls access to PakBus
l
communications over a TCP/IP link. PakBusTCP passwords can be set in Device
Configuration Utility.
Disabling FTP or setting an FTP username and password in Device Configuration Utility.
l
Disabling HTTP/HTTPS or creating a .csipasswd file to secure HTTP/HTTPS (see
l
.csipasswd file (p. 155) for more information).
Enabling HTTPS and disabling HTTP. To prevent data collection via the web interface, both
l
HTTP and HTTPS must be disabled.
For additional information on data logger security, see:
4 Ways to Make your Data More Secure
l
Available Security Measures for Internet-Connected Dataloggers
l
How to Use Datalogger Security Codes
l
How Can Data be Made More Secure on a CRBasic PakBus Datalogger
l
How to Generate SFTP Keys Easily
l

20.2.4.3 The .csipasswd file

Basic access authentication was implemented in the form of an encrypted password file named
.csipasswd. It defines read/write access to the web interface. A file named .csipasswd is
stored, and hidden, on the data logger CPU drive. Multiple user accounts with differing levels of
access can be defined for one data logger. Four levels of access are available:
Anonymous: Read-only access. This account cannot be removed, but privileges can be
l
disabled.
Read Only: Data collection is unrestricted. Clock and writable variables cannot be changed.
l
Programs cannot be viewed, stopped, deleted, or retrieved.
Read/Write: Data collection is unrestricted. Clock and writable variables can be changed.
l
Programs cannot be viewed, stopped, deleted, or retrieved.
The
20. Installation 155