How to Set Up Security in RSLinx Classic

Note: Perform these steps ONLY if you want to secure RSLinx Classic with FactoryTalk Security.  Otherwise, close this window to continue installing RSLinx Classic.

RSLinx Classic 2.58.00 (CPR 9 Service Release 4), along with supporting RSSecurity, also supports FactoryTalk Security. FactoryTalk® Security is intended to improve the security of your automation system by limiting access to those with a legitimate need. FactoryTalk Security authenticates the identities of users and authorizes user requests to access a FactoryTalk-enabled system against a set of defined user accounts and access privileges held in the FactoryTalk Directory. For more information on FactoryTalk Security, read the ‘About FactoryTalk Security’ topic located in RSLinx Classic’s Online Help.  The following table explains the steps you would need to perform to implement one of the two security mechanisms (FactoryTalk Security and RSSecurity) supported by RSLinx Classic.

 If you are

Do this

a user who wants to:

- use FactoryTalk Security, and

- has never configured security using RSSecurity

1.       Install RSSecurity Emulator from Start > Programs > Rockwell Software > FactoryTalk Tools > RSSecurity Emulator Install.

Note: During the RSSecurity Emulator install, the ‘FactoryTalk Directory’ screen appears (see the following figure) where you will be prompted to select the FactoryTalk Directory (Network or Local) that RSSecurity Emulator should use.

Network2

2.       Install RSLinx Classic from RSLinx Classic Required Steps Install screen.  

3.       While running RSLinx Classic’s installation wizard, the Security Configuration Selection screen appears.  On this screen, click the ‘Enable Security’ option.  

EnableSecurityAddSecurityPolicies2

4.       Click Next to finish the RSLinx Classic installation.

5.       Open FactoryTalk Administration Console from Start > Programs > Rockwell Software > FactoryTalk Administration Console to add user accounts and set security settings to secure RSLinx Classic.

Note:

·          For more information on how to add user accounts, read the Add a user account topic in FactoryTalk Administration Console help, located at Manage Factory-Talk Enabled Systems > Log on and configure security > Configure security > How to > Work with user accounts > Add a user account.

·          For more information on how to secure RSLinx Classic's features, read the Secure Product Features topic in FactoryTalk Security help, located at Configure Security > How to > Set up product policies > Secure product features.

·          For more information on what you can secure in RSLinx Classic, read the What can I secure in RSLinx Classic topic in RSLinx Classic Online help, located at How to > Secure RSLinx Classic with FactoryTalk Security > What can I secure in RSLinx Classic.

6.       Open RSLinx Classic from Start > Programs > Rockwell Software > RSLinx > RSLinx Classic, and click Security > Set Security User from the main menu. In the New User dialog box, enter the username and password of the user you created in FactoryTalk Administration Console (Step 5), and click OK.

Note: Because access to features in RSLinx Classic is governed by the permissions you set for a user in FactoryTalk Administration Console, some features out of the 13 securable features in RSLinx Classic maybe inaccessible, (for example, if the user you entered in Step 6 does not have the appropriate permission).

This completes the security setup for RSLinx Classic.

a user who wants to:

- use FactoryTalk Security, as well as

- import an existing RSSecurity Configuration into the FactoryTalk Directory

 

1.       Run the Security Config Explorer by clicking Start > Programs > Rockwell Software > Security Server Network Edition > Security Config Explorer.

2.       Locate the RSSecurity Configuration (*.bak) file, and click File > Export to backup the *.bak file.

3.       Close the Security Config Explorer.

4.       Uninstall RSSecurity Server/Client (whichever is installed on this machine) from Start > Settings > Control Panel > Add/Remove Programs.

5.       Install RSSecurity Emulator from Start > Programs > Rockwell Software > FactoryTalk Tools > RSSecurity Emulator Install.   

Note: During RSSecurity Emulator install, the ‘FactoryTalk Directory’ screen appears (see the following figure) where you will be prompted to select the FactoryTalk Directory (Network or Local) that RSSecurity Emulator should use. At this step, be sure to make a note of the directory you choose-you will require this information when importing the .bak file into the FactoryTalk Directory in step 9).

Network2

6.       Install RSLinx Classic from RSLinx Classic Required Steps Install screen.

7.       While running RSLinx Classic’s installation wizard, you will see the Security Configuration Selection screen.  On this screen, click the ‘Enable Security’ option.

EnableSecurityAddSecurityPolicies2

8.       Click Next to continue with the installation.

9.        Import the RSSecurity Server database by clicking Start > Programs > Rockwell Software > FactoryTalk Tools > Import RSSecurity Configuration.  

Note: While running the Import RSSecurity Configuration utility, the ‘FactoryTalk Security Import’ dialog box appears (see the following figure).  In the ‘Destination’ listbox on this dialog box, be sure to import the .bak file to the directory where you installed the Emulator (see step 6).  (Selecting the default option in the destination field stores your file in the Network directory.)

Network3

10.   Open RSLinx Classic, and click Security > Set Security User from the main menu. In the New User dialog box, enter the username (domain name\username) and password of the RSSecurity user. 

Note: If you do not remember the usernames of the users that existed in your old RSSecurity setup, perform the following steps:

a.       Run FactoryTalk Administration Console by clicking Start > Programs > Rockwell Software > FactoryTalk Administration Console.

b.      In the Explorer pane, expand the FactoryTalk Local or Network Directory tree (depending upon which you are using), and then expand the Systems folder until the Users folder is visible.

c.       In the Users folder, the users who have domain associated with their usernames (for example, na\Bob) are your old RSSecurity users.

Note: Because access to RSLinx Classic features are governed by the permissions you set in security server, some features out of the 13 securable features in RSLinx Classic maybe inaccessible (for example, if the user you entered in Step 10 does not have the appropriate permission).  

This completes the security setup for RSLinx Classic.