Which file contains the authentication information in CF card of PLC?
Hello, if you are talking about the user role system within AS then there is no fixed filename.
It is a file placed on the secure partition system of the CF and the password inside this file for example is SHA256 encrypted. So even if you know which file this is it is rather useless
May I ask what the reason of this question is ?
2 Likes
Hi，thank you so much for your answer.
I am doing a test on PLC information security in China.
The test facility think there will be a file， because other manufacturers have a file that includes a user name and an encrypted password.
We do have a file as well but as mentioned the filename is dynamically created and differs depending on the amount of overall files (in regards to your PLC type and application and settings of the PLC) and also as mentioned the password is encrypted.
Here is an example for the content of this file:
"Property ID=“Password” Value=“bL3DNQOpeohgnWO6/XrO3/WjxEdDmtVI5eN8bg9oxj1gcJSr5ng=” DataType=“STRING”
The “value” does reflect the password but as you might see it is encrypted and does not show the actual “value”
I am sorry but B&R does not hand out details how the overall encryption is done due to security reasons
1 Like
