(Issues not applicable to AX-3.8) Backups of a Niagara system are often used to make a copy to replicate an identically-configured station to use on many different hosts (sometimes called a “system image”).
| Replicated stations, Backup dist and Distribution File Installer | Dist file modifications: | |
![]() |
![]() |
- keys removed, - modified manifest, - modified config.bog, - only legacy encoded passwords, - only default passwords |
| Weakened security from identical encryption key files on all hosts. | Modifications (at right) keep security strong in all hosts. | |
| NOTE: Issues above and below are not in AX-3.8. See Improvements and changes in AX-3.8. | ||
| Replicated stations, using Station Copier | Config.bog file modifications: | |
![]() |
![]() |
- only legacy encoded passwords, - only default passwords |
| Client (account) passwords unusable. | Modifications (at right) make all passwords usable. | |
For this replicated station use case, you must take care that:
The same encryption key is not installed to different hosts, as this weakens overall security strength.
If any passwords need to be part of the copy, that they are encoded with the portable legacy format, and not the new (non-portable) encrypted format.
To do this you must modify the config.bog file, and if using the backup dist method (above, top) also make changes to other items contained in the .dist file. Moreover, you should also be sure to test these modifications before relying on them for jobs or sharing with customers or clients.
As with regular backup dist files, keep these modified files (config.bog, .dist) in a secure location as well. Or for best security, consider deleting them after installing in the the intended target platforms.
Copyright © 2000-2016 Tridium Inc. All rights reserved.