Physical Security of the Device - EcoStruxure Panel Server Cybersecurity Guide

Tamper-Indicating Label

The EcoStruxure Panel Server has a tamper-indicating label which helps protect the device physical security. It must be clean and show no sign of tampering (for example, rips, tears, or scratches). Schneider Electric advises against using a device that has visibly been tampered with.

Installation

To help protect the device physical security, the following installation is advised:

Install the EcoStruxure Panel Server in a cabinet that is secured in a manner appropriate to the risk level of your installation (for example, a cabinet with padlock or a key).
If the EcoStruxure Panel Server is mounted in a switchboard, install the switchboard in a secured room (for example, with locked door or camera).

NOTE: The protection of the physical security of the device includes the protection of the QR code. The QR code gives access to the device code of the Panel Server, which should be considered as a credential for the device. It is used:

In the secure claiming of the device for cloud applications
As the password for connecting to the Wi-Fi access point

Password Management

To help protect the device from malicious attack, change the password of the Panel Server Wi-Fi access point by using the Panel Server webpages.

The password must conform to the following rules:

Between 8 and 32 characters
At least one character in uppercase
At least one character in lowercase
Must not contain special characters other than: ! “ # $ % & ‘ ( ) * + - , . ; : / ~ < > = ? @ [ ] \ ^ _ ` { } |
The space character is permitted