TOP Server is Secure Out-of-the-Box to Prevent Unauthorized Access

Secure access to the TOP Server Configuration is fully-configurable

Access to the TOP Server configuration can be restricted through the integrated User Manager. This tool allows the administrator to define user groups and users with restricted access to certain project configuration tasks and provides the ability to disconnect client applications. This ensures that no unauthorized access can occur right from the initial installation, preventing the following undesired actions:

• Stopping the TOP Server Runtime Service
• Accessing and making changes to the TOP Server configuration
• Accessing Administration Settings for the TOP Server application
• Viewing/changing the OPC UA configuration
• Running and making changes with the License Utility

TOP Server also offers the ability to encrypt .opf project files—which often contain proprietary information on an organization's network and processes—when they are being transferred to other users or other instances of TOP Server.

And the TOP Server Configuration API is disabled by default and, when enabled, defaults to HTTPS encryption to protect your TOP Server configuration from unauthorized third-party access.

The TOP Server Out-of-the-Box Security Features technical blog also provides a deep dive on these features. 

Secure access to the TOP Server Runtime is fully-configurable

TOP Server also offers various features and functionality to control user access to the server, data source, or data values.

• For users of the OPC UA Server interface in TOP Server, the Security Policies plug-in limits access based on OPC UA user credentials while supporting default handling for anonymous users (both OPC UA and other non-OPC UA client interfaces).
  • The ability to dynamically address information can be disabled, limiting user access to tags defined within the project.
  • For full details on using the Security Policies plug-in, please refer to the help file.
• TOP Server supports a number of secure client standards including SNMP (v3 security), OPC UA, and OPC DA (DCOM security) to further restrict access to the server, as well as a number of secure device protocols to meet the requirements of DNP3, SNMP, and OPC UA data sources.
• Secure data tunnels can be configured by leveraging multiple TOP Server instances at remote endpoints to pass data through firewalls and meet authentication and encryption requirements across the Internet.