Introduction
This enteliWEB Network Hardening Guide provides guidance used in planning and implementing security best practices in an enteliWEB installation. enteliWEB can be made more secure by configuring the following areas:
- Passwords
- Users and Groups Permissions Management
- Authentication
- Platform Management
These security configurations require an enteliWEB user with administration permissions.
The security practices described in this guide are recommended practices to securely install and configure enteliWEB. However, Delta Controls Inc. cannot guarantee that the implementation of the security practices or recommendations described in this guide will ensure the security of the enteliWEB system, or prevent, or alter the potential impact of, any unauthorized access or damage caused by a cybersecurity incident.
Related documentation
The following related documents are available at support.deltacontrols.com.
- enteliWEB Deployment Guide
- KBA2252: Delta Product Security
- KBA2037: Securing enteliWEB using HTTPS
Encryption used in enteliWEB
Application | Component | Algorithm/Protocol/Modes | Key Length |
---|---|---|---|
enteliWEB | Configuration File | AES with CBC mode | 256 bits |
enteliWEB | PostgreSQL Database | AES with CBC mode | 256 bits |
enteliWEB | BACnet Secure Connect Configuration Tool | SHA256 | 256 bits |
IIS Server | n/a | TLS 1.2 with TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 | 128/256 bits |
BACnet Server | BACnet Secure Connect Communication | TLS 1.3 | 128 bits |