Each NiagaraStation has its own authorization subsystem. To provide the required level of security, each command received by the station should be verified and logged by the customer-controlled, station-based authorization system.

This diagram shows the general flow for the cloud-to-device security commands.

Figure 6.   Security commands general flow

The execution of cloud commands introduces additional security risk for the station. Famous use case: a cloud command, which writes boiler target temperature to 500 degrees.

Execution of all commands is disabled by default. To enable command execution, a customer or integrator must explicitly enable it.

ACTION