In addition to ION Setup’s four-level security access system (see"Applying security" on page 43), the Security screen also configures Standard and, for some ION meters, Advanced meter security.
Note
You must be logged in to ION Setup with supervisor-level security in order to make any changes to the security for a meter. See"Applying security" on page 43for more detailed information. Once you select your preferred options, you must restartION Setup for the changes to take effect.
Depending on the device, the steps below may vary. For instructions specific to your device, refer to your device documentation.
To configure Standard security features:
1. Select Security Mode and click Edit.
2. Open the Standard.scf file. The Security Wizard leads you through the configuration process. Enter the meter password, if prompted.
3. Select your configuration options (meter password, active web server, allow web server programming and allow front panel programming).
If you change the communications settings of your meter with the Allow Front Panel Programming setting cleared, you may lose communications. In this case, a factory reconfiguration of your meter is required, which resets your meter to its factory defaults and erases all logged data on the meter. See"Password recommendations" on page 93for more information.
NOTICE
LOSS OF DATA
• Record your meter's front panel and user password information in a secure location.
• Do not change communications port settings with the Allow Front Panel Programming setting cleared (unchecked).
Failure to follow these instructions can result in a factory reset of the meter and the loss of all logged data.
4. Click Finish when configuration is complete. A prompt appears asking if you want to save your security settings in a file.
5. Click Yes to save your security settings to a file.
Note
Save your meter's security settings file under a descriptive name in a secure location, along with your meter and user password information. Your meter's security settings file can be used to configure additional meters with the same settings, and can also assist with meter troubleshooting.
6. Click No if you do not want to save your security settings.
If you change the communications settings of your meter with the Allow Front Panel Programming setting cleared, you may lose communications. In this case, a factory reconfiguration of your meter is required, which resets your meter to its factory defaults and erases all logged data on the meter. See"Password recommendations" on page 93for more information.
NOTICE
LOSS OF DATA
• Record your meter's front panel and user password information in a secure location.
• Do not change communications port settings with the Allow Front Panel Programming setting cleared (unchecked).
Failure to follow these instructions can result in a factory reset of the meter and the loss of all logged data.
To configure the Advanced security features:
1. Select Security Mode and click Edit.
2. Open the Advanced .scf file. The Security Wizard leads you through the configuration process. Enter the meter password, if prompted.
3. Select your configuration options (meter password, web server programming and front panel programming).
4. Click Next. If the protocol lockout feature is available on your meter, the Select protocol lockout options screen appears.
The communications protocol lockout feature allows you to set the number of invalid login attempts each user (in this case, user is a single user and password combination) can make using a particular protocol and communications method before being locked out.
You can also configure the lockout duration for all configurable protocols.
Once a user is locked out, the meter will not accept login attempts from that user on that protocol and communications method until the lockout duration has passed.
5. Select the check boxes beside the protocols for which you want to enable communications protocol lockout.
6. Highlight a selected protocol and click Edit to modify the lockout values for that protocol.
• Protocol lockout specifies the number of invalid login attempts allowed per
user/password combination before access is denied to that user using that protocol and communications method.
• Session timeout specifies the active session duration for a protocol; during this time, repeated invalid login attempts using the same user/password combination are not registered (repeated invalid attempts with different combinations are still registered).
This only applies to non-session-based protocols which send credentials with each packet (such as ION or HTTP). Configuring this setting helps prevent accidental lockouts and the meter’s event log from being filled with protocol access events, if logging of these events is enabled.
7. Click OK. Repeat for all protocols for which you want to enable communications protocol lockout.
8. Type the lockout duration, in minutes. The lockout duration specifies how long the meter ignores communication attempts by a user who is locked out. The lockout duration value applies to all lockout-enabled protocols.
Once a user is locked out, the user cannot access the meter using the same protocol and communications method, regardless of whether or not the user enters the correct
USER/password combination.
9. Click Events to enter the event priority for valid login attempts, invalid login attempts and protocol lockouts. The event priorities apply to all lockout-enabled protocols. Enter 0 (zero) to disable event logging for a particular type of login attempt.
10. Click Next. The Define individual users/passwords screen appears.
11. Select the check boxes of the users you want to configure (1 through 16). Expand the tree by clicking on the + and select the appropriate check boxes to configure your user’s access levels.
12. Select a user, then click Password to set a password for that user. Click OK.
If you change the communications settings of your meter with the Allow Front Panel Programming setting cleared, you may lose communications. In this case, a factory reconfiguration of your meter is required, which resets your meter to its factory defaults and erases all logged data on the meter. Refer to"Password recommendations" on page 93for more information.
NOTICE
LOSS OF DATA
• Record your meter's front panel and user password information in a secure location.
• Do not change communications port settings with the Allow Front Panel Programming setting cleared (unchecked).
Failure to follow these instructions can result in a factory reset of the meter and the loss of all logged data.
13. Click Finish when you are done configuring users. A prompt appears asking if you want to save your security settings in a file.
14. Click Yes to save your security settings to a file.
Note
Save your meter's security settings file under a descriptive name in a secure location, along with your meter and user password information. Your meter's security settings file can be used to configure additional meters with the same settings, and can also assist with meter troubleshooting.
15. Click No if you do not want to save your security settings.
Note
When the advanced security settings are applied, the settings immediately take effect, causing ION Setup to prompt you to authenticate with a user name and password to continue.