Security Management For Hmi Devices - Siemens MTP700 Unified Comfort Hygienic Compact Operating Instructions

Siemens' products and solutions undergo continuous development to make them more
secure. Siemens strongly recommends that product updates are applied as soon as they are
available and that the latest product versions are used. Use of product versions that are no
longer supported, and failure to apply latest updates may increase customer's exposure to
cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS
Feed under (https://www.siemens.com/cert).
Disclaimer for third-party software updates
This product includes third-party software. Siemens AG only provides a warranty for
updates/patches of the third-party software, if these have been distributed as part of a
Siemens software update service contract or officially released by Siemens AG. Otherwise,
updates/patches are undertaken at your own risk. You can find more information about our
Software Update Service offer on the Internet at Software Update Service
(https://support.industry.siemens.com/cs/ww/en/view/109759444).
Notes on protecting administrator accounts
A user with administrator privileges has extensive access and manipulation options in the
system.
Therefore, ensure there are adequate safeguards for protecting the administrator accounts to
prevent unauthorized changes. To do this, use secure passwords and a standard user account
for normal operation. Other measures, such as the use of security policies, should be applied
as needed.
2.3

Security management for HMI devices

Data security
Data from external sources
The HMI device has external interfaces and can be connected to the Internet. Edge
management allows you to install apps from any source.
Data from untrusted sources represents a significant security risk.
Customers are responsible for transferring only data from trusted sources to the HMI device
and only opening trusted files and web pages on the HMI device.
Entering passwords
If you enter passwords via an external keyboard, they can be logged and passed on unnoticed
via a keylogger.
Use only the screen keyboard of the HMI device to input passwords.
Unified Comfort Panels Hygienic
Compact Operating Instructions, 04/2023, A5E52219907-AA
2.3 Security management for HMI devices
Safety instructions
15