Security - Honeywell AC-250NXS User Manual

Security

To ensure correct metrological operation and data security, the metrological seals and the product
casing must not be damaged.
Privacy
Honeywell can read non-personal data from a returned meter for quality control and diagnostics
through a physical connection and via display menu.
The data will not be forwarded to a third party. Honeywell cannot access the data by means of a
remote interface.
Key management
The meter comes with secure keys loaded in the factory. All keys are 128-bit length AES
symmetric keys. It is recommended that the keys must be changed after meters are installed with
customer specific keys. Honeywell NetSense provides a mechanism for OnDemand key
replacement to meters once they appear in the NetSense after meter installation.
The meter supports management and installer roles, a management client can change both
management and installer keys and an installer can change just the installer key.
The meter keys must be periodically changed. Honeywell NetSense provides a mechanism for
periodic key replacement to all meters. Please refer to Honeywell NetSense documentation for
further details on this.
The key management and change must happen in a secure environment and the newly
generated keys must be stored securely in a secure database.
LOSS OF METER KEYS WILL MAKE THE PRODUCT COMPLETELY UNUSABLE.
If Honeywell NetSense software is not used for managing AC-250NXS meters, please contact
Honeywell for details on key management.
Network Recommendations
The Head End software must be securely managed including the meter keys and database with limited
access. Use firewalls wherever necessary to secure the network and Head End System software.
Perform Key Management according to "Recommendation for Key Management, Special Publication
800-57 Part 1 Rev. 5, NIST, 05/2020."
© Elster American Meter Company LLC – 2020
22