Schneider Electric EcoStruxure Process Expert User Guide
Pubblicità
Pubblicità
EcoStruxure™ Process Expert for AVEVA System Platform
EIO0000004233 07/2020
EcoStruxure™ Process
Expert for AVEVA System
Platform
Security Deployment Guide
07/2020 www.schneider-electric.com
2
The information provided in this documentation contains general descriptions and/or technical characteristics of the performance of the products contained herein. This documentation is not intended as a substitute for and is not to be used for determining suitability or reliability of these products for specific user applications. It is the duty of any such user or integrator to perform the appropriate and complete risk analysis, evaluation and testing of the products with respect to the relevant specific application or use thereof. Neither Schneider Electric nor any of its affiliates or subsidiaries shall be responsible or liable for misuse of the information contained herein. If you have any suggestions for improvements or amendments or have found errors in this publication, please notify us.
You agree not to reproduce, other than for your own personal, noncommercial use, all or part of this document on any medium whatsoever without permission of Schneider Electric, given in writing. You also agree not to establish any hypertext links to this document or its content.
Schneider Electric does not grant any right or license for the personal and noncommercial use of the document or its content, except for a non-exclusive license to consult it on an "as is" basis, at your own risk. All other rights are reserved.
All pertinent state, regional, and local safety regulations must be observed when installing and using this product. For reasons of safety and to help ensure compliance with documented system data, only the manufacturer should perform repairs to components.
When devices are used for applications with technical safety requirements, the relevant instructions must be followed.
Failure to use Schneider Electric software or approved software with our hardware products may result in injury, harm, or improper operating results.
Failure to observe this information can result in injury or equipment damage.
© 2020 Schneider Electric. All rights reserved.
EIO0000004233 07/2020
Table of Contents
Safety Information. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
About the Book . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Chapter 1 Security Capabilities of the Software . . . . . . . . . . . . . . .
Software Defense in Depth . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Chapter 2 Securing the Environment . . . . . . . . . . . . . . . . . . . . . . .
Hardening the Computer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Chapter 3 Secure Software Operation . . . . . . . . . . . . . . . . . . . . . .
Secure Software Operation Guidelines . . . . . . . . . . . . . . . . . . . . . . . .
Resources . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Chapter 4 Account Management. . . . . . . . . . . . . . . . . . . . . . . . . . .
Account Management Guidelines . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Chapter 5 Removing the Software . . . . . . . . . . . . . . . . . . . . . . . . .
Software Removal Guidelines . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
19
21
21
23
23
27
11
11
15
16
9
9
5
7
EIO0000004233 07/2020
3
4
EIO0000004233 07/2020
Safety Information
Important Information
NOTICE
Read these instructions carefully, and look at the equipment to become familiar with the device before trying to install, operate, service, or maintain it. The following special messages may appear throughout this documentation or on the equipment to warn of potential hazards or to call attention to information that clarifies or simplifies a procedure.
EIO0000004233 07/2020
5
PLEASE NOTE
Electrical equipment should be installed, operated, serviced, and maintained only by qualified personnel. No responsibility is assumed by Schneider Electric for any consequences arising out of the use of this material.
A qualified person is one who has skills and knowledge related to the construction and operation of electrical equipment and its installation, and has received safety training to recognize and avoid the hazards involved.
6
EIO0000004233 07/2020
About the Book
At a Glance
Document Scope
This document describes the defense in depth capabilities of EcoStruxure Process Expert for
AVEVA System Platform and contains guidelines to help you use it securely from installation to removal.
It also describes the defense in depth measures that are expected from the environment in which the software is used.
Validity Note
This document is valid for EcoStruxure Process Expert for AVEVA System Platform 2020 or later.
Related Documents
Title of documentation
EcoStruxure™ Process Expert for AVEVA System Platform Installation and
Configuration Guide
EcoStruxure™ Process Expert for AVEVA System Platform User Guide
EcoStruxure™ Process Expert for AVEVA System Platform - Control Participant
Services User Guide
EcoStruxure™ Process Expert for AVEVA System Platform - Runtime
Navigation Services User Guide
EcoStruxure™ Process Expert for AVEVA System Platform - Global Templates
Reference Manual
Reference number
EIO0000004208 (eng)
EIO0000004207 (eng)
EIO0000004210 (eng)
EIO0000004211 (eng)
EIO0000004206 (eng)
You can download these technical publications at
dcs
, Document Downloads section.
app.schneider-electric.com/ecostruxure-hybrid-
Registration required.
EcoStruxure Process Expert for AVEVA System Platform Support Portal
Visit
app.schneider-electric.com/ecostruxure-hybrid-dcs
for support, software updates, and latest information on EcoStruxure Process Expert for AVEVA System Platform.
Registration required.
EIO0000004233 07/2020
7
8
Trademarks
Schneider Electric, EcoStruxure, Process Expert for AVEVA System Platform, Control Expert, and
AssetLink are trademarks of Schneider Electric SE, its subsidiaries, and affiliates.
AVEVA, Archestra, and InTouch are trademarks or registered trademarks of AVEVA Group plc in the United States and/or other countries.
Microsoft, Windows, and Excel are either registered trademarks or trademarks of Microsoft
Corporation in the United States and/or other countries.
Caché and InterSystems are trademarks of InterSystems Corporation.
Other names are registered trademarks or trademarks of their respective owners.
Product Related Information
The examples in this manual are given for information only.
WARNING
UNINTENDED EQUIPMENT OPERATION
Adapt examples that are given in this manual to the specific functions and requirements of your industrial application before you implement them.
Failure to follow these instructions can result in death, serious injury, or equipment damage.
EIO0000004233 07/2020
EcoStruxure™ Process Expert for AVEVA System Platform
Security Capabilities of the Software
EIO0000004233 07/2020
Security Capabilities of the Software
Chapter 1
Security Capabilities of the Software
Software Defense in Depth
Overview
This guide does not describe in detail the security capabilities of the software. Refer to the
EcoStruxure Process Expert for AVEVA System Platform help for additional information on how to use them.
Refer also to the
Participant
Modicon Controllers Platform Cyber Security manual in the help of the Control
(see EcoStruxure™ Process Expert for AVEVA™ System Platform, User Guide) .
User Authentication and Protection Against Unauthorized Access
The system server uses the password of the Windows® local or Active Directory® accounts to validate that users are who they claim to be. Usernames and passwords must be entered in the log-in window (see EcoStruxure™ Process Expert for AVEVA™ System Platform, User Guide) at least one software component per computer. That is, the system server or a client.
of
Successful and unsuccessful attempts to log in to a EcoStruxure Process Expert for AVEVA
System Platform component are shown as follows:
System server: Information is shown in the system server console (see EcoStruxure™ Process
Expert for AVEVA™ System Platform, Installation and Configuration Guide) whether the system
server is running or not.
Engineering and operation clients: Information is shown in the notification panel
(see EcoStruxure™ Process Expert for AVEVA™ System Platform, User Guide) of all open engineering clients that are connected to the same system server.
Once a user is authenticated, the system server identifies the roles (see EcoStruxure™ Process
Expert for AVEVA™ System Platform, Installation and Configuration Guide) that the user has been assigned and grants them access to the corresponding software components or functionalities thereof.
Client/Server Communication Authentication and Integrity
The software implements a public key infrastructure (PKI) based on the X.509 standard. It uses a
Schneider Electric self-signed certification authority (CA) to create root and entity certificates to help secure client/server communication in the EcoStruxure Process Expert for AVEVA System
Platform infrastructure.
For configuration details, refer to the topic describing how to secure client/server communication
(see EcoStruxure™ Process Expert for AVEVA™ System Platform, Installation and Configuration
Guide) .
EIO0000004233 07/2020
9
Security Capabilities of the Software
10
EIO0000004233 07/2020
EcoStruxure™ Process Expert for AVEVA System Platform
Securing the Environment
EIO0000004233 07/2020
Securing the Environment
Chapter 2
Securing the Environment
Hardening the Computer
Overview
The computers located in the control room are highly exposed to attacks. Those running
EcoStruxure Process Expert for AVEVA System Platform, Citect SCADA, OPC Factory Server, or
OPC UA Server Expert need to be hardened.
For more detailed information, refer to the System Technical Note How can I...Reduce Vulnerability to Cyber Attacks .
Hardening Engineering Workstations
Customers may choose from various commercial computer systems for their engineering workstation needs. Key hardening techniques include:
Strong password management.
User account management.
Methods of least privilege applied to applications and user accounts.
Removal or disabling unneeded services.
Removing remote management privileges.
Systematic patch management.
Using Antivirus Software
Use an antivirus software on each computer of the EcoStruxure Process Expert for AVEVA System
Platform infrastructure and keep it up-to-date.
Configure it so that file scanning is not performed while EcoStruxure Process Expert for AVEVA
System Platform is in use.
Disabling Unused Network Interface Cards
Verify that network interface cards that are not required by the application are disabled. For example, if your system has two cards and the application uses only one, verify that the other network card is disabled.
Refer to the help of the operating systems for instructions on how to proceed.
EIO0000004233 07/2020
11
Securing the Environment
Configuring the Local Area Connection
Various Windows® network settings provide enhanced security aligned with the defense-in-depth approach that Schneider Electric recommends.
To access these settings in Windows 10 systems, from the Start button, click Settings → Network
& Internet.
The following are examples of configuration changes that you can make on your system by using
Change Adapter Options:
Disable all IPv6 stacks on their respective network cards.
Clear all Local Area Connection Properties items except for QoS Packet Scheduler and Internet
Protocol Version 4 (TCP/IPv4).
In the WINS tab of Advanced TCP/IP Settings of Internet Protocol Version 4 (TCP/IPv4), clear the Enable LMHOSTS and Disable NetBIOS over TCP/IP check boxes.
Enable File and Print Sharing for Microsoft Network.
Defense-in-depth recommendations by Schneider Electric also include the following:
Define only static IPv4 addresses, subnet masks, and gateways.
Do not use DHCP or DNS in the control room.
Disabling the Remote Desktop Protocol
The defense-in-depth strategy recommended by Schneider Electric includes disabling remote desktop protocol (RDP) unless your application requires the RDP. The following steps describe how to disable the protocol:
Step
1
2
Action
In Windows 10, enter Remote desktop settings in the search field of the taskbar.
In the Remote Desktop settings screen, disable remote desktop.
Updating Security Policies
Ensure that the security policies on the computers in your system are up-to-date.
Contact your system administrator or refer to the gpupdate command in the Microsoft help.
12
EIO0000004233 07/2020
Securing the Environment
Disabling LANMAN and NTLM
The Microsoft LAN Manager protocol (LANMAN or LM) and its successor NT LAN Manager
(NTLM) have vulnerabilities that make their use in control applications inadvisable.
The following steps describe how to disable LM and NTLM in a Windows 10 system:
Step
1
2
3
4
5
Action
In the search field of the taskbar, enter secpol.msc
to open the Local Security Policy window.
Open Security Settings → Local Policies → Security Options.
Select Send NTLMv2 response only. Refuse LM & NTLM in the Network Security: LAN Manger authentication level field.
Select the Network Security: Do not store LAN Manager hash value on next password change check box.
In a command prompt, enter gpupdate to commit the security policy change.
Applying Operating System Updates
Before deployment, update all computer operating systems by using the Windows Update tool. To access this tool in Windows 10, from the Start button, click Settings → Update & Security.
EIO0000004233 07/2020
13
Securing the Environment
14
EIO0000004233 07/2020
EcoStruxure™ Process Expert for AVEVA System Platform
Secure Software Operation Guidelines
EIO0000004233 07/2020
Secure Software Operation
Chapter 3
Secure Software Operation
What Is in This Chapter?
This chapter contains the following topics:
Topic
Secure Software Operation Guidelines
Resources
Page
16
19
EIO0000004233 07/2020
15
Secure Software Operation Guidelines
Secure Software Operation Guidelines
Installing the Software
During installation, you can change the location where the software will be installed
(see EcoStruxure™ Process Expert for AVEVA™ System Platform, Installation and Configuration
Guide) .
Schneider Electric recommends installing EcoStruxure Process Expert for AVEVA System
Platform at the default location, that is <default system drive>\Program Files\Schneider
Electric\EcoStruxure\Process Expert ASP.
Opening the System Server Console and Starting Clients
To help improve security:
Log in by using a standard Windows user account to use the software.
Open the system server console and start clients by double-clicking the desktop shortcuts or clicking entries in the Microsoft® Windows® Start menu.
Do not start the software by using the Run as administrator command on system server or client desktop shortcuts and Microsoft® Windows® Start menu entries.
Passwords
Use strong passwords and change them regularly.
The table describes the various passwords that you need to manage when using the software.
Password-protected object
The simulatorprofile.sta
Control project that is loaded in the controller simulator
(see EcoStruxure™ Process
Expert for AVEVA™ System
Platform, Installation and
Configuration Guide) when you start it.
Description
Helps secure the Ethernet port that is used by the controller simulator on the local computer.
Can also be used to restrict deployment and execution operations performed on the Control project that is deployed to the controller simulator by using the engineering client and operations performed by using the operation client when using Runtime Navigation
Services (RTNS).
The default password is documented in the Installation and Configuration Guide.
Control project that is deployed to the controller.
Restricts deployment and execution operations performed on the Control project by using the engineering client.
Also restricts operations performed by using the operation client when using
Runtime Navigation Services (RTNS).
Recommended action
You can perform either action:
Change the default password of the
simulatorprofile.sta project.
Have your own password-protected
Control project loaded when the controller simulator starts.
NOTE: If the current Windows® session is not the one that was used to install the software, the simulator needs to be configured manually (see EcoStruxure™
Process Expert for AVEVA™ System
Platform, User Guide) to load a passwordprotected Control project at startup.
Set a password after configuring the controller.
16
EIO0000004233 07/2020
Secure Software Operation Guidelines
Password-protected object
The maintenance mode of the system server console.
Description
Restricts access to advanced functionalities and settings
(see EcoStruxure™ Process Expert for
AVEVA™ System Platform, Installation and Configuration Guide) of the system server.
The default password is documented in the Installation and Configuration Guide.
Recommended action
The password cannot be changed.
NOTE: To access the system server console, a user must belong to the group
(see EcoStruxure™ Process Expert for
AVEVA™ System Platform, Installation and Configuration Guide) allowing them to use the system server.
Folder Sharing
Using the software requires sharing folders so that the software can copy files to or read files from these folders.
This is the case, for example, for the folder in which the variable list (.xsy) and application hierarchy
(.xml) files are generated on the system server.
When sharing a folder apply the following secure practices:
Restrict access to the folder by giving permissions only to users who must access this folder.
Disable sharing after the data transfer is complete.
Locking Sessions
When the computer that runs a EcoStruxure Process Expert for AVEVA System Platform component is left unattended, lock the component unwanted access to the software and its files.
(see EcoStruxure™ Process Expert for
AVEVA™ System Platform, User Guide) and the Windows® session to help protect against
Software Updates
Install the Schneider Electric Software Update (SESU) tool and enable update notifications to stay informed of the latest software updates for installed Schneider Electric products.
The option to install the tool can be selected during software installation or thereafter by using the installer of the tool, which is located in the SESU folder in the root of the software installation package.
If the computer is not connected to the Internet, visit the EcoStruxure Process Expert for AVEVA
System Platform
Support Portal
regularly.
Log Files and Data Backup Files
Back up installation log files (see EcoStruxure™ Process Expert for AVEVA™ System Platform,
Installation and Configuration Guide) and activity log files (see EcoStruxure™ Process Expert for
AVEVA™ System Platform, User Guide) on a regular basis and store them securely.
Back up the database (see EcoStruxure™ Process Expert for AVEVA™ System Platform,
Installation and Configuration Guide) and systems (see EcoStruxure™ Process Expert for
AVEVA™ System Platform, User Guide) on a regular basis and store them securely.
EIO0000004233 07/2020
17
Secure Software Operation Guidelines
Exporting Data in CSV Format
The software lets you export data of application objects (see EcoStruxure™ Process Expert for
AVEVA™ System Platform, User Guide) in comma-separated value (.csv) format.
If a free-form text parameter of an exported object (such as Description of a folder or instance of the application) contains a formula (string starting with =) either because it has been entered by using the Application Explorer or added through an import operation, the formula can be executed when the export file is opened by using Microsoft® Excel® or a similar type of application.
Before opening a file exported in .csv format, it is your duty to perform the appropriate and complete verification of the properties of exported objects by using the Application Explorer to ensure that they do not contain malicious code, which could lead to formula injection.
Installing and Importing Data in the Software
The software lets you export the following editable files containing data of systems:
Application export files (.csv and .xml) (see EcoStruxure™ Process Expert for AVEVA™
System Platform, User Guide)
Hardware mapping export files (.csv) (see EcoStruxure™ Process Expert for AVEVA™ System
Platform, User Guide)
Application hierarchy file (.xml)
Platform, User Guide)
(see EcoStruxure™ Process Expert for AVEVA™ System
Before importing such files in the same or a different EcoStruxure Process Expert for AVEVA
System Platform infrastructure, it is your duty to perform the appropriate and complete verification of these files to ensure that they have not been tampered with and are free from malicious code.
18
EIO0000004233 07/2020
Secure Software Operation Guidelines
Resources
Cybersecurity Support Portal
Register to the support portal to stay informed about cybersecurity vulnerabilities and security notifications for Schneider Electric solutions.
Visit https://www.se.com/ww/en/work/support/cybersecurity/overview.jsp
Reporting Vulnerabilities
The Cybersecurity Support Portal lets you report vulnerabilities that are not addressed yet.
EIO0000004233 07/2020
19
Secure Software Operation Guidelines
20
EIO0000004233 07/2020
EcoStruxure™ Process Expert for AVEVA System Platform
Account Management
EIO0000004233 07/2020
Account Management
Chapter 4
Account Management
Account Management Guidelines
Overview
The actions that users are allowed to perform depend on the type of account they have and their group membership.
By default, users are not members of any group for EcoStruxure Process Expert for AVEVA
System Platform.
For a description of predefined RBAC roles and the corresponding groups, refer to the topic describing role-based access control (see EcoStruxure™ Process Expert for AVEVA™ System
Platform, Installation and Configuration Guide) .
Actions Based on User Accounts and Group Membership
Action
Installation
Operation
Required account type, group membership, and scope of actions
Any user with administrator privileges on the local computer can install the software.
During installation, the following can be configured:
Installation paths ( see page 16
Selection of station role.
) .
Simulator Ethernet port configuration (see EcoStruxure™ Process Expert for AVEVA™
System Platform, Installation and Configuration Guide) .
Local or domain RBAC authentication selection (see EcoStruxure™ Process Expert for
AVEVA™ System Platform, Installation and Configuration Guide) when installing the system server.
Any user ( see page 16 ) who belongs to one or more predefined groups (see EcoStruxure™
Process Expert for AVEVA™ System Platform, Installation and Configuration Guide) , either on the local computer or on the domain controller can log in (see EcoStruxure™ Process
Expert for AVEVA™ System Platform, User Guide) to the corresponding EcoStruxure
Process Expert for AVEVA System Platform components that are installed on the computer and use them (for example, the system server or the engineering client depending on the station role).
The user who is allowed to use a component can also lock (see EcoStruxure™ Process
Expert for AVEVA™ System Platform, User Guide) and configure it.
EIO0000004233 07/2020
21
Account Management
Action Required account type, group membership, and scope of actions
Configuration After installation, any user who belongs to the group that allows them to use the system server can configure it as follows once they log in to the server:
Access to the parameters of the System Server Configuration Wizard.
Creation of root CA certifications and installation of security certificates on the local
computer (requires elevated privileges).
Access to advanced parameters.
The engineering and operation clients can be configured as follows by any user who is allowed to log in to the computer:
Engineering client:
Access to the parameters of the Engineering Client Configuration Wizard.
Installation of security certificates on the local computer (requires elevated privileges).
Operation client:
Access to the parameters of the Operation Client Configuration Wizard.
Installation of security certificates on the local computer (requires elevated privileges).
Maintenance Any user who can log in to the computer as administrator can update the software.
Any user who can log in to the computer can perform the following actions:
Repair the software.
Add and remove EcoStruxure Process Expert for AVEVA System Platform components
proposed by the installer.
Modify the RBAC authentication domain (system server computer only).
Removal
To configure and modify RBAC, the following rights are required:
Domain authentication: Network administrator. Can create and delete groups on the
domain controller and add/remove users.
Local authentication: Computer administrator. Can only add/remove users to/from groups created locally by the software and can delete groups.
Log files created by the software can be viewed, edited, and deleted by the following users:
Installation log files (see EcoStruxure™ Process Expert for AVEVA™ System Platform,
Installation and Configuration Guide) : Any user who is allowed to log in to the computer.
Activity log files (see EcoStruxure™ Process Expert for AVEVA™ System Platform, User
Guide) : User who is logged in to the computer.
To back up, restore, and purge data, users require the following rights:
Database backups (see EcoStruxure™ Process Expert for AVEVA™ System Platform,
Installation and Configuration Guide) : Users who belong to the group allowing them to use
the system server.
System (see EcoStruxure™ Process Expert for AVEVA™ System Platform, User Guide) and controller data backups (see EcoStruxure™ Process Expert for AVEVA™ System
Platform, User Guide) : Users who belong to the group allowing them to use the engineering client (Engineer role).
Purging templates (see EcoStruxure™ Process Expert for AVEVA™ System Platform,
User Guide) : Users who belong to the group allowing them to use the engineering client
(Template Designer role)
Any user who can log in to the computer can remove the software (see EcoStruxure™
Process Expert for AVEVA™ System Platform, Installation and Configuration Guide) .
22
EIO0000004233 07/2020
EcoStruxure™ Process Expert for AVEVA System Platform
Removing the Software
EIO0000004233 07/2020
Removing the Software
Chapter 5
Removing the Software
Software Removal Guidelines
Overview
Detailed software removal procedures are provided in the topic describing how to remove the software (see EcoStruxure™ Process Expert for AVEVA™ System Platform, Installation and
Configuration Guide) . They need to be applied on each computer of an EcoStruxure Process
Expert for AVEVA System Platform architecture.
The data that remains on the computer after the software has been removed is described here.
Removal Methods
You can remove the software from the computer by using either of the following methods. In each case, some data remains on the computer, which needs to be removed manually.
Method
Double-clicking setup.exe in the installation package and selecting the Remove option.
In the Microsoft® Windows® Control Panel, clicking Uninstall or change a program → EcoStruxure Process Expert → Change and selecting the Remove option.
In the Microsoft® Windows® Control Panel, clicking Uninstall or change a program → EcoStruxure Process Expert → Uninstall and selecting the Remove option.
Description
Removes the software from the local computer with the option to remove also the following components:
Security certificates
Associated and third-party components
Removes only the software from the local computer.
EIO0000004233 07/2020
23
Removing the Software
Data to Be Removed Manually
The following table indicates which data remains on the computer when you remove the software.
Data
Database
Third-party and associated components
Schneider Electric licensing software
Deployed files
Exported files
Log files
Database, system, and data backup files
Software help files
Security certificates
Description and location
Data of systems and their content as well as global templates that are accessed by the system server.
Refer to the topic describing default destination folders (see EcoStruxure™ Process
Expert for AVEVA™ System Platform, Installation and Configuration Guide) for the location of the Db folder, which contains the database that was used last.
Software managing the Cache database.
Refer to the topic describing installed software components (see EcoStruxure™
Process Expert for AVEVA™ System Platform, Installation and Configuration
Guide) .
In addition, the InterSystems folder at the path C:\Program Files as well as thirdparty configuration files remain on the computer on which the system server is installed.
Associated components
AssetLink.
(see EcoStruxure™ Process Expert for AVEVA™ System
Platform, Installation and Configuration Guide) such as Control Expert and
License Manager and Floating License Manager.
Refer to the topic describing installed software components (see EcoStruxure™
Process Expert for AVEVA™ System Platform, Installation and Configuration
Guide) and the Licensing Guide (see EcoStruxure™ Process Expert for AVEVA™
System Platform, Licensing Guide) for details.
The variable list (.xsy) and application hierarchy (.xml) files (see EcoStruxure™
Process Expert for AVEVA™ System Platform, User Guide) that are created during the build of Control Participant projects.
The various user-created files, such as topology, application, project, hardware mapping, and template export files remain at the location where they have been created when you remove the software.
Installation log files (see EcoStruxure™ Process Expert for AVEVA™ System
Platform, Installation and Configuration Guide) .
The various user-created back-up files, such as database and system backup files remain at the location where they have been created when you remove the software.
HTML help files of templates of a previous software version or user-created HTML help files.
Refer to the topic describing how to use the help (see EcoStruxure™ Process
Expert for AVEVA™ System Platform, User Guide) .
EcoStruxure Process Expert for AVEVA System Platform root CA and entity certificates that are installed on the local computer.
Refer to the topic describing certificate properties name and location.
(see EcoStruxure™ Process
Expert for AVEVA™ System Platform, Installation and Configuration Guide) for the
24
EIO0000004233 07/2020
Data
Control project file
User groups
Firewall entries
Folder sharing configurations
Other data
Removing the Software
Description and location
Default password-protected Control project file (.sta) that can be loaded when the controller simulator starts.
Refer to the topic describing the installation of the controller simulator
(see EcoStruxure™ Process Expert for AVEVA™ System Platform, Installation and
Configuration Guide) .
Groups created by the software on the local computer when local authentication is selected.
Refer to the topic describing role based access control details.
(see EcoStruxure™ Process
Expert for AVEVA™ System Platform, Installation and Configuration Guide) for
Entries that are created by the software during installation for Schneider Electric and third-party components.
Refer to the topic describing firewall exceptions (see EcoStruxure™ Process Expert for AVEVA™ System Platform, Installation and Configuration Guide) for details.
The configuration of shared folders is not modified when you remove the software.
Data in the <software name> folder (for example, Process Expert for AVEVA
System Platform), which is located at the path %localappdata%\Schneider Electric.
EIO0000004233 07/2020
25
Removing the Software
26
EIO0000004233 07/2020
EcoStruxure™ Process Expert for AVEVA System Platform
Index
EIO0000004233 07/2020
Index
A
account management account management guidelines, antivirus software using antivirus software, 11
21
C
computers hardening computers, cybersecurity defense in depth, resources,
9
13
11
LANMAN / NTLM, local area connections, 12 network interface card settings, remote desktop,
19
12 software operation guidelines,
11
16
D
defense in depth security capabilities of the software, 9
H
hardening hardening computers, 11
L
LAN cybersecurity guidelines,
LANMAN / NTLM cybersecurity guidelines, licensing
Process Expert, 11
12
13
EIO0000004233 07/2020
N
network interface cards cybersecurity guidelines, 11
O
operation software operation guidelines, 16
R
remote desktop cybersecurity, 12 removing removing the software, 23 reporting reporting vulnerabilities, 19
S
support
Cybersecurity Support Portal, 19
U
uninstalling removing the software, 23 user accounts account management guidelines, 21
V
vulnerabilities reporting vulnerabilities, 19
27
Index
28
EIO0000004233 07/2020
Scarica
Link pubblico aggiornato
Il link pubblico alla tua chat è stato aggiornato. Puoi visualizzare e gestire i tuoi link di chat dopo la registrazione qui.
Link pubblico del documento
Pubblicità