SecurityService (nss-SecurityService)

This component, available in the nss palette monitors certificates and generates alarms for those that are about to expire. Other station services with configurable security settings report to the SecurityService.

NOTE: Manually installing the nss modules (nss-rt, -ux, -wb) requires a station restart. Otherwise, when you click on the added SecurityService component, a "Not Found" error message displays in Workbench. In cases where you restart the station after installing the modules you do not see this error. Also note that uninstalling the nss modules causes an auto restart of the station.

The Security Dashboard is the main view for the Security Service. For complete details on the view, refer to“ nss-SecurityDashboardView” in the “Plugins” section of this guide.

Figure 13. SecurityService properties

To access these properties, expand Config > Services, right-click SecurityService and click Views > AX Property Sheet.

In addition to the standard properties (Status, Fault Cause, and Enabled), the following configuration properties are present.

Name	Value	Description
Certificates	additional properties	Contains the certificates in use in the station. For each certificate listed the following read-only data is shown.
Certificate Info		Displays the certificate name/Alias
Expiry		Displays the number of days until/since the certificate expiry date.
Used In		Displays the name and ORD of the Service using the certificate.
Save Dashboard Data to Bog	true, false (default)	In a supervisor (or other station licensed for the system security dashboard), if set to `true`, the dashboard information is stored in the station's `.bog` file. This makes the information available immediately on station restart, instead of having to fetch it from the remote stations. If set to false (the default), the data will not be saved to the `.bog` file. On station restart, the system dashboard data will not be available until a dashboard refresh is triggered (via the action on the service).
Station Link Config	Display remote station dashboard (default), Display local view of the remote station dashboard view	Determines if the links on the SYSTEM dashboard link directly to the remote station, or if they link to the NiagaraNetwork station in the supervisor. In most cases, it is a better experience to link directly to the station, unless you know that the user will have access to those stations from the browser, or if you are concerned about the user having to log in to multiple stations. The SSO feature can improve that experience.

Actions

Refresh System Dashboard Data — this action fetches the Security dDashboard data from all remote stations (or all stations matching the provided filter).