Siemens SINAMICS User Manual

5.6.3 Access protection and rights
5.6.3.1 SINAMICS access protection
The complete access protection in the web server comprises 3 components:
● SINAMICS Write and know-how protection
The specified settings of the write and know-how protection – including password protection
– also apply for access via the web server to the drive parameters and configuration. The
protection cannot be bypassed via the web server.
An OEM exception list specifies which parameters can also be displayed in the web server,
despite know-how protection being activated.
If access is not possible because of these settings, a corresponding message text is
displayed on the web pages.
● Web server access protection (Page 59)
The web server access protection can be used to limit access to the user "Administrator"
and/or "SINAMICS" with the corresponding rights.
Use a secure password for both logins.
● Access protection for parameter lists in the web server (Page 61)
Access rights to parameter lists in the web server can be defined by the "Administrator"
user for each parameter list.
For security reasons, as the "Administrator" user, you should never assign the "SINAMICS"
user with the "write" and "change list" rights at the same time. Otherwise, the "SINAMICS"
user would be able to change any chosen parameter at access levels 1 - 3.
Summary
The most effective access protection is a combination of the aforementioned safety
mechanisms.
NOTICE
Tampering with the converter parameter assignment resulting from password theft
If unauthorized persons obtain a user's login data, they can manipulate the parameter
assignment and cause damage.
● For your drive, activate the know-how protection. For more information, refer to the chapter
titled "Know-how protection".
● Ensure that especially critical parameters are not included in the OEM exception list.
5.6.3.2 Web server access protection
Both user logins with the following standard rights are available for the SINAMICS web server:
User Login name Function Standard rights
User 1 SINAMICS Diagnostics
user
Activated Read access rights and the right to ac‐
knowledge faults.
User 2 Administra‐
tor
Parameter as‐
signment user
Deactiva‐
ted
Access rights for modifying systems and
projects and the right to acknowledge
faults.
Security measures for SINAMICS
5.6 Web server
Industrial Security
Configuration Manual, 08/2017, A5E36912609A 59

Siemens SINAMICS Specifications

General

Brand	Siemens
Model	SINAMICS
Category	DC Drives
Language	English

Summary

Safety Instructions

Note on Safety Integrated

Details regarding the use and safety considerations of Safety Integrated functions.

Industrial Security

Security Information

General information on Siemens' industrial security offerings and recommendations for secure operation.

Why is Industrial Security so Important?

Explains the importance of industrial security due to new trends and potential threats.

Security Measures in Automation and Drive Technology

Details security measures implemented by Siemens in automation and drive technology products.

Security Management

Outlines the security management process based on IEC 62443 and ISO 27001 standards.

General Security Measures

Plant Security

Covers physical security measures for production areas and company premises.

Network Security

Encompasses all measures for planning, implementing, and monitoring network security.

Separation Between Production and Office Networks

Explains the strict separation of production networks from other company networks for protection.

System Integrity

Measures to protect automation and drive systems from unauthorized access and malware.

Whitelisting

Explains whitelisting philosophy for trusting only verified applications to prevent malware.

Patch Management

Covers patch management using WSUS to ensure timely installation of security updates.

Security Measures for SINAMICS

Write Protection and Know-how Protection

Details functions to protect projects against changes, unauthorized access, or copying.

Know-how Protection

Describes know-how protection for protecting confidential company knowledge from unauthorized access.

Parameters: Access Levels + Password

Explains parameter access levels and password protection for securing parameter modification.

Communication Services and Used Port Numbers

Lists communication protocols, layers, functions, and port numbers used in SINAMICS.

Web Server

Details the web server functionality for accessing devices and its security features.

Assigning a Password

Explains how to assign passwords for SINAMICS and Administrator users for web server access.

Access Protection and Rights

Details access protection mechanisms for the web server, including user rights.

Communication

Communication according to PROFIdrive

Details communication based on the PROFIdrive profile for drive technology.

Cyclic Communication

Describes cyclic communication for exchanging time-critical process data between controller and drive.

Communication via PROFIBUS DP

Provides information on communication via the PROFIBUS DP fieldbus standard.

Communication via PROFINET IO

Details PROFINET IO as an Industrial Ethernet standard for automation applications.

Communication via MODBUS TCP

Introduces the Modbus TCP protocol for communication via Ethernet.

Communication via EtherNet/IP

Details communication via EtherNet/IP for connecting drives to control systems.

Communication via SINAMICS Link

Explains the basic principles and features of SINAMICS Link communication.

Communication Services and Used Port Numbers

Lists communication protocols, layers, functions, and port numbers used in SINAMICS.

Time Synchronization Between the Control and Converter

Explains time synchronization methods for comparable timestamps and improved diagnostics.

Service & Support

Technical Questions or Additional Information

Provides contact details and required data for technical support.

Contact Person

Information on how to contact local offices for on-site service or spare parts.

Siemens Support for on the Move

Information about the Siemens Industry Online Support app for mobile devices.

References

Additional Information

Lists general and product-specific information resources and manuals for Industrial Security.

Glossary