DHFC XI Recommendations
For client devices that run DHFC XI, the application provides users with access to an important asset of the organization: its GIS data. As such, it is important to secure that data against theft.
For Windows, refer to Microsoft's documentation on BitLocker.
Recommendations specifically for securing client devices:
-
Enable full disk encryption on devices that host Solution Center.
-
Configure screen lock timeout for a maximum of five minutes.
-
For Windows specific settings:
-
Do not grant local administrator privileges to end users.
-
Do not grant end-user account permissions to install applications.
-
Use application “allow-listing” to permit only approved applications or executables to run.
-
Use real-time endpoint protection to detect unauthorized changes to installed components.
-
Schneider Electric recommends you give users access only to secure locations determined by your IT department. File permissions are managed by the user’s Windows profile.
-
Abandoned File Directories After Upgrading from Squirrel to MSIX
As described in the myArcFM article Designer HFC MSIX Migration, the application uses MSIX installer technology, and it no longer uses the previous Squirrel installer technology.
After you upgrade using the MSIX installer, some file directories from the Squirrel installer are left behind. These include the following:
-
%appdata%\local\CoaxNetworkDesigner: This is where the client application settings were stored. Once you have upgraded, these settings are no longer used, and you can safely delete this directory.
-
%appdata%\roaming\SE.Coax.NetworkDesigner: This is where the logs were stored when using the Squirrel installer. You might want to keep the logs for historical purposes. You can either leave them in the directory, or you can copy them to another location. If you copy them to a different location, you can then safely delete this directory.
-
%appdata%\local\Schneider_Electric\DesignerHFC*: This is where dialog location settings were stored. You might have multiple child folders depending on how many versions you have installed using the Squirrel installer. Once you have upgraded, these settings are no longer used, and you can safely delete this directory.
Uninstalling the Application and Transferring Equipment:
Uninstall the application from either:
-
The Apps & features menu on your computer. Locate the application, then click Uninstall.
-
The Start Menu on your computer. Right-click the application icon, then choose Uninstall.
After uninstalling the application, the following files and directories are still present:
-
Logs stored in C:\ProgramData\Schneider Electric\SE.Coax.NetworkDesigner.
-
Settings stored in C:\ProgramData\Packages\ArcFMDHFC_qybjwhg5w8jy8. If this directory is not deleted and the user reinstalls, any Settings changes previously made are restored.
-
Authentication tokens stored in %AppData%\SE.Coax.NetworkDesigner\SecretCache\. If this directory is not deleted and the user reinstalls, the user is logged in automatically upon launching the reinstalled application.
If your company intends to transfer the equipment to another user, you should follow best practices for the secured deletion of these directories.