Task 5: Create A Supervisor Password; Task 6: Set Up Secure Web Access - GE Multilin D400 Instruction Manual

Task 5: Create a supervisor password

Procedure

Task 6: Set up secure web access

Prerequisites
Requesting a
certificate
Obtaining a security
certificate and private
key
94
To create a supervisor password:
1. At the D400#>> command prompt, type d400cfg and press Enter.
2. Enter 1. Configure Authentication.
3. Enter 4. HMI Supervisor Settings.
4. Enter 1. Change HMI Supervisor Password.
5. Follow the instructions to enter a new password for the root user.
Do not share the supervisor user's password. The Supervisor user's password can be
changed in future if required. This operation can only be performed using root credentials.
The D400 provides security features to authenticate its identity and to maintain the privacy
of information between the D400 and your computer when communicating over the
Internet. The D400 makes use of digital signatures and secure Web access to ensure this
security.
Secure Web access to the D400 is provided using the Secure Sockets Layer (SSL) protocol
over a 128-bit connection. To support the D400's secure Web access features, you need to
obtain and install a security certificate and a private key on the D400.
You need the following items to set up secure Web access for the D400:
• Approved IP address, host name and fully qualified domain name for the D400
• Security certificate and private key
Security certificates are issued by independent certification authorities (CAs). Your Web
browser must host the certificate for the CA you choose to use. Refer to your browser's
configuration to find out which certification authorities are supported. Optionally, you can
install a CA's certificate if it doesn't exist in your browser.
To obtain a certificate, you need to create and send a Certificate Signing Request (CSR) to
the CA. At the same time you create the CSR, you also create a private key. The CSR and
the provided certificate and private key are supplied in individual text files, typically named
server.csr, server.crt and server.key respectively.
Contact a certification authority to request a certificate and to create your private key.
When making your CSR request, provide the host name of the D400 (the full name that
users are to enter in the Web browser to connect to the D400) for the certificate's
"Common Name", and specify a non-encrypted private key file.
When you receive your certificate and private key, you should create a back up copy and
store it in a secure place other than the D400.
GE INFORMATION
CHAPTER 6: SETTING UP THE D400
D400 SUBSTATION GATEWAY INSTRUCTION MANUAL