In
Niagara 4.4 and later,
Workbench requires that the user remove the default platform user account and change the default system passphrase prior to completing
a platform connection.These requirements are configurable via the Platform Connections options under .
Figure 6. Platform connection options
These platform connection options are “true” by default, so that anytime
Workbench detects either of the following conditions when making a platform connection it launches the
Change Platform Defaults Wizard which steps you through the required changes:
- The system passphrase of the remote platform is the default value.
- The platform credentials of the remote platform are factory default values.
This view allows you to configure whether or not the system prompts the user to remove the default platform user account and/or
to change the default system passphrase when making a platform connection. These options are offered as a convenience. For
example, if another workflow already prompts for these changes, setting one or both of these options to
false can prevent redundant prompts.
The system passphrase is used to protect sensitive information stored on all
Niagara systems, and on the micro SD card in JACE-8000 controllers. The system passphrase is assigned as the file passphrase for “portable” files, such as backups and station copies,
and is used to encrypt those files. During operations in which you transfer encrypted files to a system (restoring backups,
transferring a station, etc.) you are prompted to enter the file passphrase if it doesn’t match the system passphrase for
the target system. For more details, see “System passphrase” in the Niagara Platform Guide.
Perform the following steps:
CAUTION: When you create a system passphrase be sure to make a note of it and guard it carefully! If you lose the system passphrase,
you will lose access to encrypted data. You can change the system passphrase using the Platform Administration tool.
NOTE:
Niagara 4 cannot successfully configure the system passphrase on the JACE-8000 when it is running the
AX daemon. You must use
AX-3.8U1 instead. Also, in the
N4 Platform Administration view, the Update Authentication and System Passphrase buttons are disabled when the remote platform is the
AX-3.8U1 daemon. Note, that in release
N4.1, the buttons do not appear disabled, however, setting the system passphrase fails when you attempt to configure it.