Safety Recommendations
File Protection
If RapidSCADA is used in a corporate environment, ensure that other users do not have access to the RapidSCADA installation directory. On Windows, open the properties of the directory containing RapidSCADA applications, choose the Security tab, check and and configure access rights.
HTTPS
Configure a web server to enable HTTPS protocol for the Webstation application. Using HTTPS, all traffic between a browser and the web server, including passwords, is encrypted.
VPN
Use VPN to provide access for external users. If possible, avoid open access to Webstation from outside.
Passwords
Change the default passwords. To create strong passwords, use a password generator, for example, available here. If a company uses Active Directory, setting up RapidSCADA user authentication based on Active Directory enhances system security.
Passwords to be set:
- User passwords in the Users table of the project.
- Password for connecting to the Server application in the Communicator and Webstation settings.
- Agent password, located in the
ScadaAgentConfig.xmlfile. - Password for connecting to the Agent application in the deployment profile.
Note: The user table stores password hashes. A password cannot be recovered from a hash code. XML configuration files contain encrypted passwords that are decrypted by applications during execution.