Designing a PIN Code Policy

Overview

In the context of the MasterPacT MTZ circuit breaker with MicroLogic Active control unit, local access to data on the MicroLogic Active HMI can be protected by a PIN code.

Cybersecurity Recommendations Concerning PIN Code Policy

WARNING
POTENTIAL COMPROMISE OF SYSTEM AVAILABILITY, INTEGRITY, AND CONFIDENTIALITY Change default PIN codes at first use to help prevent unauthorized access to device settings, controls, and information. Failure to follow these instructions can result in death, serious injury, or equipment damage.

The PIN code policy is one of the main elements of the cybersecurity policy. A good PIN code policy consists of:

Avoiding PIN codes which are easy to guess, such as birthday dates, repeated digits, or numerical sequences
Changing PIN codes regularly
Using a password vault to manage access PIN codes
Forbidding reuse of old PIN codes
Regularly reminding users about best practices concerning PIN codes

To help protect your system, at a minimum you should:

Enforce the use of strong PIN codes
Change the PIN code periodically

All users must be aware of best practices concerning PIN codes. These include:

Not sharing personal PIN codes
Not displaying PIN codes during PIN code entry
Not transmitting PIN codes in email or by any other means
Not saving the PIN codes on PCs or other devices

PIN Code for MicroLogic Active Critical Settings and Controls

When you access a protected parameter on the MicroLogic Active HMI, you are prompted to create an account and set a PIN code. You are then prompted to enter the PIN code each time you access a protected parameter.

By default, the PIN code is associated with the SecurityAdmin account. You can change this account name with EcoStruxure Power Commission software.

The following actions are protected by PIN code:

HMI PIN code modification
Protection settings
Ground-fault protection test for MicroLogic Active 6.0 control unit
Date and time modification

The PIN code must consist of 6 digits, from 0 to 9.

For more information about creating a PIN code, refer to MasterPacT MTZ - MicroLogic Active Control Unit - User Guide.