In addition to VI server, it's also important to manage the NI Auth settings on the host pc an on the RIO device. NI Auth helps secure access to a device via MAX and the Web Configuration and Monitoring tool. If left unsecured, the Web-based Configuration and Monitoring tool allows one to access and edit files on a RIO device in addition to providing the ability to reboot the RIO device. Similarly, one can also use MAX to install or uninstall drivers from the RIO device and reboot the RIO device. For protection from unauthorized use of MAX and the NI Web-based Configuration and Monitoring tool, it's critical that you properly setup NI Auth settings.
Note: To enable NI-Web Based Configuration and Monitoring on a RIO device, you must have NI Web-based Configuration and Monitoring and NI System Configuration network support installed to the device.
The easiest way to access and set an NI Auth password is to rely on the Web-based Configuration and Monitoring interface. To reach the interface on the RIO device, open a web browser and navigate to http://<RIO_ip.addr>:3580 or http://<RIO_ip.addr>, where <RIO_ip.addr> is the IPv4 address of the RIO device. The second URL will work only if using LabVIEW Real-Time 2010 or later. To reach the interface on the host pc, open a web browser and navigate to http://<host_ip.addr>:3580 or http://localhost:3580, where <host_ip.addr> is the IPv4 address of the host pc.
Figure 5: The NI Web-based Configuration and Monitoring interface to a RIO device
Once you have accessed the Web-based Configuration and Monitoring interface, select Login from the blue banner at the top. You will then be presented with a prompt to enter the user name and password. The default user name is "admin" and the default password is simply blank.
Figure 6: The default login to NI Auth
After logging in using the default credentials, select the lock and key icon from the banner on the left edge of the Web-based Configuration and Monitoring interface to access the security configuration page. Refer to Figure 6 for the icon. You can use the security configuration page to configure NI Auth settings on the host pc and RIO device. The first step is to change the default password for the admin account to something other than a blank password to prevent attackers from gaining easy access. You can then create other user accounts and organize user accounts into groups. You have the ability to set permissions on a user and/or group basis. Ultimately, you want to use NI Auth to limit each user's ability to use the Web-based Configuration and Monitoring Tool to the specific activities that each user/group is responsible for.
Figure 7: Accessing the security configuration page
After configuring the NI Auth account, when the cRIO is accessed via MAX, you will be prompted for valid credentials to view the installed software on the target. Additionally, the options to Set Permissions and Log In, as illustrated in Figure 7, direct users to the login prompt on the Web Based Configuration and Monitoring Tool. Users will have to enter valid credentials and can then set permissions using the security configuration page as discussed above.
Figure 8: Accessing NI-Auth via MAX