Device Characteristics
Overview
The EcoStruxure Panel Server is equipped with security-enabling features. These features come in a preset state and can be modified to meet your installation needs. The Panel Server must only be configured and set by qualified personnel because disabling or changing settings affect the overall security robustness of the Panel Server and your network security.
Use this guide in conjunction with DOCA0172•• EcoStruxure Panel Server - User Guide for detailed configuration of functions and settings of Panel Server.
EcoStruxure Panel Server Interfaces
The following table summarizes the communication architectures available with Panel Server by model:
| Main Features | EcoStruxure Panel Server | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Entry | Universal | Advanced | ||||||||
| PAS400 | PAS600 | PAS600T | PAS600L | PAS600LWD | PAS600PWD | PAS800 | PAS800L | PAS800P | ||
|
10/100BASE-T Ethernet |
One RJ45 port |
✔ |
- |
- |
- |
- |
- |
- |
- |
- |
|
Two RJ45 ports |
- |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
|
|
Upstream Modbus TCP/IP connectivity |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
|
|
Upstream Wi-Fi connectivity |
✔ |
✔ |
✔ |
✔ |
- |
- |
✔ |
✔ |
✔ |
|
|
Downstream Modbus TCP/IP connectivity |
- |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
|
|
Downstream IEEE 802.15.4 connectivity |
✔ |
✔ |
✔ |
✔ |
- |
- |
✔ |
✔ |
✔ |
|
|
Downstream Modbus-SL connectivity |
- |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
|
|
Two digital inputs (for WAGES (Water, Air, Gas, Electricity, Steam)) |
- |
- |
- |
✔ |
✔ |
- |
- |
✔ |
- |
|
|
Wi-Fi external antenna |
- |
✔ |
✔ |
✔ |
- |
- |
✔ |
✔ |
✔ |
|
|
IEEE 802.15.4 external antenna |
- |
- |
- |
- |
- |
- |
✔ |
✔ |
✔ |
|
Convention
EcoStruxure Panel Server is hereafter referred to as Panel Server.
Supported Protocols
The EcoStruxure Panel Server supports the following protocols:
-
DHCP for network IP addressing
-
DNS for network name resolution
-
DPWS for network discovery
-
HTTPS (TLS v1.2) for configuration through configuration tools and embedded webpages
-
IEEE 802.15.4 for wireless communication using radio frequency communication ISM band 2.4 GHz (not available for Wired by Design models)
-
Modbus TCP and Modbus-SL for communications with other Operational Technology (OT) devices
-
NTP for time synchronization
-
RSTP to allow robust Ethernet ring topologies for critical applications
-
SFTP for publication of CSV files to an SFTP server
-
VPN client for remote access (open to Schneider Electric Customer Care Center)
-
WPA2 and WPA for Wi-Fi communication (not available for Wired by Design models)
Security Features
The EcoStruxure Panel Server supports the following security features:
-
Only firmware digitally signed by Schneider Electric can be installed on the Panel Server.
-
At each boot, the firmware digital signature is validated before execution, to help ensure that it has not been tampered with.
-
User passwords are stored as salted and hashed (SHA256) passwords.
-
You can erase all information from the Panel Server using the Restart button.
-
The device has an internal clock and remembers its date and time for a few months without power.
-
Panel Server authenticity key is stored in a highly secure Common Criteria CC EAL6+ chip.