5 - Web Applications Security and Settings 2022

Web Applications Settings

• Users may access the Settings page for web application settings and configuration tools
• The Settings page is a sub-category of Security in PME 2022
• The Settings page offers a number of tools: Users, Billings Rates, Device Manager, Device Replacement, Hierarchies, Modeling, Diagrams Control Options, System, System Log, and Diagnostics & Services

Personalization

• Users can personalize the web application by setting Personal Preferences
• Each Standard User can change their Personal Details from their user account

Registration & Analytics

• Registration information will be shared with Schneider Electric after completion of the Registration process
• Customers will receive occasional Product Information including new features, service pack releases, and recommended cybersecurity updates

Security

• The Diagrams Control Options page allows users to enable or disable manual control actions in Diagrams and set the confirmation method
• The user can select the confirmation method for Manual Control Actions: Dialog Box without Password or Dialog Box with Password
• Control in Diagrams is disabled by default
• User access permission needs to be set up in Vista for each control action in Diagrams
• Users must have at least Controller level access or higher to access the Diagram Control Options settings
• Control through Diagram is only available over HTTPS connection
• Only Supervisor level users can access the Diagram Control Options settings
• Control in Diagrams must be enabled for the confirmation method settings to be displayed

Login Options

• The Login Options page is only applicable if Windows Users are configured
• The administrator can select from three login options: Manual Login Only, One-Click Login Only, or Manual Login and One-Click Login
• The administrator can disallow login for Standard Users and only allow login for Windows Users
• Standard Users, if allowed to log in, always have to enter their credentials manually

Session Timeout

• The session timeout value can be set for both Web and Windows applications
• The timeout value can be from 1 minute to 1440 minutes (1 day)

Integrations

• Integrations is a sub-category of Security
• The Integrations page includes tools for Authorized Hosts, EWS Client, and Integration Utility

Authorized Hosts

• Allows admins to define third party web resources that can embed the PME Web Applications
• Allows admins to control the access to third party web resources using PME Authentication

EWS Client

• PME is set up as an EWS Client to pull data from EBO (EWS Server)

Integration Utility

• Generates pre-authenticated links to PME resources
• Authenticates the link using Standard Users or Windows Users
• The downloaded HTML link must be opened in a different browser in order to test the link
• One-click login must be enabled to use the Windows user authenticated links

Key Points to Remember

• Users can personalize the Web Application experience by changing the language, color, region etc.
• The administrator/supervisor must set the System Theme to User Defined to enable High Contrast mode.
• High Contrast Mode supports only Microsoft Edge, Chrome, Firefox or Safari
• Control through Diagram is only available over HTTPS connection and for Controller or higher login access.

Test your knowledge on the settings and security features of web applications. This quiz covers the various tools available for users, personalization options, registration processes, and security measures. Dive into the essential components that ensure an effective web application experience.