Issue:

Need to add, update, or delete user accounts and assign roles for secure access to RTU functions.

Product:

SAGE Remote Terminal Unit (RTU)

All Models

Environment:

• Firmware version C3414-500-S02YZ or later
• User Manager utility installed on PC
• Access to RTU web GUI with Up/Download privileges

Cause:

Default user credentials (Admin/Telvent1!) are insecure and must be replaced. Role-based access control ensures compliance and limits unauthorized actions.

Resolution:

1. Create User Package with User Manager:

   • Launch User_Manager_YZ.exe from firmware update package.
   • Add users:
     • Username: ≥5 characters, no special characters
     • Password: ≥8 characters, includes uppercase, lowercase, number, punctuation
   • Assign Role (Config, Display, Command, Up/Download, File Transfer, Remote Shell, IED Tunnel).
   • Optionally attach SSH public key (.pk2) for secure services.
   • Click Generate to create:
     • <DESC>_<VER>_Users.tar.gz (upload file)
     • access_<DESC>_<VER>.cfg (backup/recovery file)

2. Upload User Package to RTU:

   • Log in to RTU web GUI with Up/Download privilege.
   • Navigate to Up/Download → Update Users.
   • Click Choose File, select .tar.gz package, then Send to RTU.
   • Changes apply immediately; no reboot required.

3. Manage Roles and Sessions:

   • Max 5 concurrent logins; session timeout configurable (default 15 min, max 180 min).
   • Proper logout required to avoid lingering sessions.

4. Password Recovery:

   • Import access_<DESC>_<VER>.cfg in User Manager if password not concealed.
   • Concealed passwords cannot be recovered.

Udgivet til: Schneider Electric Danmark