Professional Documents
Culture Documents
TB - FX5U GXW3 Using Remote Access Password Function
TB - FX5U GXW3 Using Remote Access Password Function
Mitsubishi Electric Automation, Inc.
500 Corporate Woods Parkway, Vernon Hills, IL 60061 • phone: 847.478.2100
An ISO9001 Certified Company
Technical Bulletin
FX5U GXW3 Using Remote Access Password Function
It is possible to restrict remote access to an iQ‐F PLC across every type of connection or just specific
types.
Using a password on Remote Access communication channels can secure both internal and external
access to your PLC and programs including Read/Write/Verify and Initialize options from GXW3.
This will also help prevent unauthorized modifications of your program and PLC data settings.
There may be specific connections that will be left open for Ethernet based devices on your machine or
internally accessible areas.
1 | P a g e R72‐17Z‐SLSASG‐003‐*
Mitsubishi Electric Automation, Inc.
500 Corporate Woods Parkway, Vernon Hills, IL 60061 • phone: 847.478.2100
An ISO9001 Certified Company
Step 1: Review Configured Ethernet Connections (if any):
Under the Project Navigation tree go to Parameter/FX5CPU/Module Parameter/Ethernet Port, then
(Basic Settings/External Device Configuration/Detailed Settings):
The Default settings are as shown above, yours could be vastly different.
2 | P a g e R72‐17Z‐SLSASG‐003‐*
Mitsubishi Electric Automation, Inc.
500 Corporate Woods Parkway, Vernon Hills, IL 60061 • phone: 847.478.2100
An ISO9001 Certified Company
In this example we will choose to Password protect only the MELSOFT connections (1 ,3, 4, & 5):
Once the specific connections are identified, close the configuration window without changes.
3 | P a g e R72‐17Z‐SLSASG‐003‐*
Mitsubishi Electric Automation, Inc.
500 Corporate Woods Parkway, Vernon Hills, IL 60061 • phone: 847.478.2100
An ISO9001 Certified Company
Step 2: Setting Remote Password
Use Remote Password Setting…
(a) Set “CPU Module” under Product Name, then click “Detailed Settings”
4 | P a g e R72‐17Z‐SLSASG‐003‐*
Mitsubishi Electric Automation, Inc.
500 Corporate Woods Parkway, Vernon Hills, IL 60061 • phone: 847.478.2100
An ISO9001 Certified Company
(b) Using Remote Password Detail Setting then check Enable All, or select the User
Connections determined before.
(c) Make selection or Enable All for the System Connections Valid settings (then hit Ok)
NOTE: Notice there is no option to Remote Password protect the direct serial
communication (at the top of the setting window)
OR
5 | P a g e R72‐17Z‐SLSASG‐003‐*
Mitsubishi Electric Automation, Inc.
500 Corporate Woods Parkway, Vernon Hills, IL 60061 • phone: 847.478.2100
An ISO9001 Certified Company
(d) Set Remote Password by clicking on the upper left button “Password”then hit “Ok”
For our example we use “FESG_2017” (notice the Password Strength rating), note If
you make the password visible, you do not have to re‐enter it
6 | P a g e R72‐17Z‐SLSASG‐003‐*
Mitsubishi Electric Automation, Inc.
500 Corporate Woods Parkway, Vernon Hills, IL 60061 • phone: 847.478.2100
An ISO9001 Certified Company
Step 3: Save and Write Project PLC
Once the project is downloaded and the PLC reset, you can save and close your project.
When you reopen and attempt to connect you will get the request for the password.
Even with the Connection Test in the Connection Destination Window you will get a request for the
password:
An attempt to just monitor the PLC will do the same:
7 | P a g e R72‐17Z‐SLSASG‐003‐*
Mitsubishi Electric Automation, Inc.
500 Corporate Woods Parkway, Vernon Hills, IL 60061 • phone: 847.478.2100
An ISO9001 Certified Company
As well as any attempt to perform Online Memory Operations (i.e. Initialize attempt to clear the PLC
remotely)
8 | P a g e R72‐17Z‐SLSASG‐003‐*
Mitsubishi Electric Automation, Inc.
500 Corporate Woods Parkway, Vernon Hills, IL 60061 • phone: 847.478.2100
An ISO9001 Certified Company
There are many other features of note, but the ability to lock out access and track failed attempts to
login are a useful feature under Diagnostics/Ethernet Diagnostics (see Sect 11.2 of the Melsec iQ‐F FX5
User’s Manual (Ethernet Communications) for more details)
There are special (SD) Registers in the CPU that will help monitor lock out Status and attempts.
SD10270, SD10271 and SD10320 thru SD10340 for example.
9 | P a g e R72‐17Z‐SLSASG‐003‐*