Enabling General Mode Security Features
Technical Note 5058
Applicable Model(s)
HMI5000 Series
Title
Enabling General Mode Security Features
Date
01/30/2023
Rev
02
P/N
0907-5058
Summary
This technical note explains how to add General Mode security to an EBPro project. The steps below detail how to create a simple project to demonstrate these features.
Solution
Create the Project
1.
Open EasyBuilder Pro and create a new project.
2.
The System Parameters popup window will be displayed automatically when the project is created. Click on the Security tab at the top of the window.
3.
From the Security tab, enable a user by checking the Enable box next to the user’s number. Enter the desired password. As shown below, only numeric characters may be used for passwords in General Security mode.
4.
Configure window 10 in your project to match the sample below by adding the following objects to the new project:
The User Number field is used to enter the user number into [LW9219]. Create the User Number field as a numeric input object.
To create the User Number field:
1.
Open the Object tab at the top of the EBPro window. Click on the Numeric object in the Input section of the ribbon menu.
2.
On the General tab in the Numeric Input object properties window, set the device name to Local HMI, and set the address to LW 9219.
3.
On the Format tab, set the numeric format to 16-bit Unsigned.
4.
Click OK.
The Password field is used to enter the password into [LW9220]. Create the Password field as a numeric input object.
To create the Password field:
1.
Open the Object tab at the top of the EBPro window. Click on the Numeric object in the Input section of the ribbon menu.
2.
On the General tab in the Numeric object properties window, set the PLC Name to Local HMI, and set the address to LW 9220.
3.
On the Format tab, set the numeric format to 32-bit Unsigned.
4.
Click OK.
Current Status is a numeric display object configured with address [LW9222] to indicate the currently logged in user’s security level. The security level is displayed as a binary value from 0 to 111111. Each bit corresponds to a security class and indicates the access classes currently allowed. Bit 0 indicates Class A; Bit 5 indicates Class F. The value 0 indicates no security access. The value 000001 indicates access class A. The value 000011 indicates access class A and B etc…
To create the Current Status field:
1.
Open the Object tab at the top of the EBPro window. Click on the Numeric object in the Input section of the ribbon menu.
2.
On the General tab in the Numeric object properties window, set the PLC Name to Local HMI, and set the address to LW 9222.
3.
On the Format tab, set the numeric format to 16-bit binary.
4.
Click OK.
When the user number and associated password are entered, the security classes assigned to the user are available, and any objects on the screen assigned a security class corresponding with the user’s security class(s) will be accessible. Logout by setting address [LB9050] on momentarily.
To create the Logout button:
1.
Open the Object tab at the top of the EBPro window. Click on the Set Bit object in the Button/Switch section of the ribbon menu.
2.
On the General tab in the Set Bit object properties window, set the Device Name to Local HMI, and set the address to LB 9050.
3.
Set the Attribute to Momentary.
4.
Click OK.
The Class A, B, and C Buttons are set bit objects are configured with read addresses [LB0] – [LB2] and security classes A, B, and C. Set each Set Bit object to “Make invisible while protected.” i.e. Class A Button is set to class A, Class B Button is set to class B, Class C Button is set to class C. The following screenshot shows the settings of the Class A Button on the security tab:
To create the Class (A-C) buttons:
1.
Click the Object tab, then select the Set Bit object from the Button/Switch section of the ribbon menu.
2.
On the General tab in the Set Bit object properties window, set the PLC Name to Local HMI, and set the address to LB 0 – LB 2.
3.
Set the Attribute to Toggle.
4.
Click OK.
The objects to the right of the Class A-C Buttons are bit lamp objects with the read addresses corresponding to the Class buttons, [LB0] – [LB2].
To create the Bit Lamps:
1.
Click the Object tab > then select the Bit Lamp object from the Lamp section in the ribbon menu.
2.
On the General tab in the Bit Lamp object properties window, set the PLC Name to Local HMI, and set the address to LB 0.
3.
Click OK.
4.
Repeat this process to create a total of three Bit Lamps assigned to addresses LB-0 through LB-2.
Simulate the Project
Execute off-line simulation for the project. Select the Project tab, then click on Offline Simulation. The screenshot below is the initial screen of an off-line simulation. At this time, no user is entered.
[LW9222] shown “0” means the current user can only use objects with no security assignments. Class A, B, and C buttons are configured to have assigned security levels of class A – class C and “Make invisible while protected.” Therefore class A, B, and C button objects are hidden by the system until a user with the necessary security access is logged in.
1.
Enter the user number “1” in [LW9219] and type the password “111” in [LW9220]. Now, bit 0 in [LW9222] is set, and User 1 has access to objects with security class A. Consequently, Class A Button appears and allows the user to operate the button changing the state of [BL_0].
The screen will display:
2.
Next, enter user number “3” and type the password “333”. User 3 is permitted to use object with classes A, B, and C. Now, bit 0 – bit 2 in [LW9222] are set to confirm the current user is allowed access to objects with classes A, B, and C.
The screen will display:
3.
Press the Logout button, and the current user will be logged out of the HMI. The HMI will return to the initial state. The operator has access to objects with no security class assigned.
The screen will display:
See the EasyBuilder Pro Programming Manual for more information on using security features in EBPro.