Specifying Access Rights; Enforcement - GE PACSystems RX3i Secure Deployment Manual

Chapter 4. Security Capabilities
The subjects defined and supported by each server protocol are indicated in the following table:
Transport Medium
Serial
Ethernet

Specifying Access Rights

For each subject, PROFINET I/O Devices from GE Automation & Controls provide predefined access rights.
Predefined Access Rights
Using the SNP Slave Application Protocol to update firmware on a PROFINET I/O Device, the Anonymous
Subject is granted the same Service Request PRIV Level as the highest PRIV Level user that currently has no
password. This equates to PRIV Level 4 user on PROFINET I/O Devices which allows Write Access to support
the Firmware Update Functionality.
Physical Access
The Web Server Password Reset feature requires physical access to the PROFINET I/O Device to assign the
Firmware Updater password.

Enforcement

Each of the PROFINET I/O Devices enforces the access rights for the data and services that it provides.
16
Functionality
Firmware Update
Web Server
Web Server Firmware Update
Web Server Password Reset
PACSystems PROFINET IO Devices Secure Deployment Guide
Application Protocol
SNP Slave
HTTP
HTTP
HTTPS
Subjects Available
Anonymous
Anonymous
Firmware Updater
Anonymous
GFK-2904D