Siemens SiPass integrated Controller And Device Installation Manual

Also see for SiPass integrated: Reference guide

Access ControllersAC5102 (ACC-G2)218 | 38 A6V111645502.2.8.3 SD Card Update TroubleshootingFor SD Card Updates, the ACC-G2 only supports non-HC type SD Cards. Thismeans SD Cards in the range of 512MB to 2GB only can be used.1. There is an issue with using 1GB and 2GB SD Cards on the older ACCs withthe 32kB EEPROM - when loaded with a CCP2 update image, the cards arenot recognized by RomBOOT. The 1GB and 2GB SD Cards are onlyrecognized on the newer ACCs with the SPI Data Flash fitted. Both ACCvariants recognized 1GB and 2GB cards with update images for the CCP1platform.2. Also, the SD Cards with CCP2 Update images needed to be run twice in orderto actually perform the update on the older ACCs if they are currently runningan older CCP1 platform build. On the first instance they just booted the existingCCP1 image - press the RESET button or power up again for the update totake effect.2.2.9 Network SecurityThe ACC-G2 uses Linux as an operating system, which provides both anincreased level of security and reliability, but also requires some extra care insecurity.Summary: disable both SSH and telnet for maximum security, and set a rootpassword.SSHA SSH server is by default running on the ACC-G2. This allows for access to thelinux shell console for maintenance purposes and trouble shooting, but in normaloperation should be disabled so that it is not bound to the Ethernet interface, butinstead restricted to just the local USB Ethernet interface.Note: After the upgrade to CCP2 Platform, SSH access is no longer available forend user.Disable external access to the SSH server with the console command:“ set ssh usb “SSH access can be enabled with the console command:“ set ssh all “The TCP port number that the SSH server listens on us 10022. This can bechanged with the console command:“set ssh port xyz “Where xyz is a valid and unique TCP port number.The standard port number for SSH is port 22, but many network probing toolsattack port 22 by default.Root PasswordThe username for gaining access to the linux shell is “root”, the password is thedefault root password – “spirit”.The root password can be changed within the application via telnet, using thecommand:“ set rootpassword Large_String “where Large_String should be long phrase that meets the requirements for astrong password. Use double quotes if the string contains spaces, but don’t usedouble quotes when entering the password via SSH login.TelnetThe ACC-G2 still offers a simple telnet server for allowing user access to theapplication. Telnet is not encrypted, so any password used to gain access to theACC-G2 can be “seen” on the network.We recommend that telnet should be disabled from SiPass after the initial setup ofthe ACC-G2.