EATON CGLine+ Web Compact Controller Instruction Manual
- June 6, 2024
- EATON
Table of Contents
EATON CGLine+ Web Compact Controller
Safety notes
CAUTION
The CGLine+ Web Compact Controller interface must be operated in an undamaged ad functional state. This equipment is intended for use in a restricted area and must be installed within 2 meters high, in the restricted area that only qualified people can access. This equipment is not suitable for use in locations where children are likely to be present. When carrying out maintenance work to the device the device must be switched off. When carrying out device main-tenance, observe national safety and accident prevention regulations and the safety notes in the operating instructions below designated with. The only skilled person is allowed to change a component providing a safeguard function. Before removing CGLine+ Web Compact Controller for maintenance, replacement, and/or repair all power should be disconnected. An appropriate disconnect device shall be provided as part of the building install-lation.CGline+ Web Compact Controller must be earthed.
Compliant with:
Audio, video, information, and communication technology equipment-part
1:safety requirement: EN62368-1 Lamp controlgear-General and Safety
requirement- EN61347-1 Developed, manufactured, and tested according to DIN EN
ISO 9001.
Description /application area
This short instruction manual describes only a quick commissioning procedure of the CGLine+ Web Compact Controller. A complete Installation and Operating Instuction are downloadable from the website of the CGLine+ Web Compact Controller.
Commissioning and modifying network settings
Please connect a patch cable with RJ45 plugs between the Compact Controller
and a PC (e.g. notebook).
CYBERSECURITY
This chapter provides guidelines to securely deploy the CGLine+ Web Compact Controller and minimize the cybersecurity risk to the installer system.
- Asset identification and inventory: Ensure that the CGLine+ Web Compact Controller is labelled and inventoried using the Part number and MAC address printed on the product label, the IP address configured during the installation of the material, and the actual firmware version.
- Restrict Physical access: Ensure that physical access to the CGLine+ Web Compact Controller is restricted only to authorized user(s). CGLine+ Web Compact Controller supports the physical access ports RJ-45, and USB that can be used to tamper with the device. Access to these ports should be restricted to authorized personnel only. Secure the facility and equipment rooms or closets with access control mechanisms such as locks, entry card readers, guards, man traps, CCTV, etc. as appropriate. Monitor and log the access at all times. Before connecting any portable device through a USB port or SD card slot, scan the device to prevent unauthorized access.
- Restrict Logical access: Access to ‘Admin’ & ‘Service’ user accounts should be restricted to authorized personnel only as system configuration can be tampered by abusing these accounts. Ensure password length, complexity, and expiration requirements are appropriately set, particularly for all administrative accounts (e.g., minimum 10 characters, mix of upper- and lower-case and special characters, and expire every 90 days, or otherwise in accordance with your organization’s policies).
- Restrict Network Access: Ideally, CGLine+ Web Compact Controller should be installed on a segre-gated network. However, when the CGLine+ Web Compact Controller is connected to a wider network, make sure that the IP address and MAC address are filtered at the router side, or using a firewall. In addition to this, open only the ports used by the CGLine+ Web Compact Controller (SMTP as configured, 587 for SMTPS, 443 for HTTPS, and 5050 for OPC communication).
- Logging and event management: Make sure you log all relevant system and application events, including all administrative and maintenance activities. Logs should be protected from tampering and other risks to their integrity (for example, by restricting permissions to access and modify logs, transmit-ting logs to a security information and event management system, etc.). Ensure that logs are retained for a reasonable and appropriate length of time. Review the logs regu-larly. The frequency of review should be reasonable, taking into account the sensitivity and criticality of the CGLine+ Web Compact Controller and any data it processes. The details how to export the logs are defined in chapter 7.14.
- Secure maintenance: In case the firmware of the device needs to be updated, you will be contacted by your Eaton local support.
- • Malware Defenses: Eaton recommends deploying adequate mal-ware defenses to protect the prod-uct or the platforms used to run the Eaton product.
• Business continuity/cybersecurity disaster recovery: Eaton recommends incorporating CGLine+ Web Compact Controller into the organization’s business continu-
city and disaster recovery plans. Organizations should establish
a Business Continuity Plan and a Disaster Recovery Plan and should periodically review and, where possible, exercise these plans. As part of the plan, important device data should be backed up and securely stored, including the current con-figuration and documentation of the current permissions/access controls, if not backed up as part of the configuration. The CGLine+ PC can be used to save the configuration of a CGLine+ Web Compact Controller using the “save file” button in the main page.
• Decommissioning: It is a best prac-tice to purge data before dispos-ing of any device containing data. Guidelines for decommissioning are provided in NIST SP 800-88.
To ensure data is unrecoverable, CGLine+ Web Compact Controller must be securely destroyed. Method of destruction includes disintegration, Incineration, Pulverization, or Melting of the electronic inside the CGLine+ Web Compact Controller. More information related to cybersecurity best practices is available on SD card provided with the device.
A copy of End user license agree-ment is available on the SD card provided with the device. By agreeing to continued use of the product, terms and conditions of EULA are applicable.
PANEL DESCRIPTION
Front panel
Electrical connections
To avoid any risk of ignition, mains conductors must be sufficiently tightened in the terminal (torque min. 40cNm).
NETWORK SETTINGS
The CGLine+ Web Compact controller is supplied as standard with the fixed IP address 192.168.1.200. Operation via dhcp (dynamic IP address assignment) is possible but not factory-activated. Because typical company networks only permit own-assigned IP addresses, we recommend configuring network settings via direct connection to a PC, e.g. a notebook. The network configuration can be done directly on the CGLine+ Web Compact con-troller. The connection to a PC via a patch cable is optional. The devices must be in the same subnet, meaning the network card of the PC must be set to 192.168.1.xxx (not equal to 200), e.g. 192.168.1.50 (subnet to 255.255.255.0). Settings for gateway and DNS must not be taken into account with a direct connection.
FIRST START
- 230V/AC When the CGLine+ Web Compact Controller starts, a loading page appears during 3 seconds. Then, a recap of the entire installation appears on screen. You can detect easily a failure and identify the line and zone in which the problem is.
- Passwords for User and Admin must be changed during the first connection. Select Administrator and enter the password by default “EATON”.
- Select User for choosing a new password. Enter the password by default “GUEST”, and enter a new password (6 characters minimum).Then validate with Save.
Go back to the previous display. Select Admin for choosing a new password.Enter the pass-word by default “EATON” and enter a new password (6 characters minimum). Then validate with Save.
GENERAL CONFIGURATION
Language setting
- Login as Admin, with the password you previously chose. Then select Configuration in the main menu.
- Select General and then choose Language in the next menu.
- Select the language you need, and then select Save for saving your choice.
Date and time setting
Stay in the General menu, and select Time for updating the time, and Date for
updating the date. Select Save for saving the updates.
Initialisation of luminaires
- Login as Admin, with the password you previously chose. Then select Commands in the general menu.
- Enter Initialisation commands, and then choose All lines.
- Select Search all lamp, and wait for the complete loading. Check the number of lamps, and click on . If one or more luminaires are missing, please refer to complete user manual.
- OPTIONAL: You can change the dates of automatic tests. Go back to main menu, and select Configuration. Then select Test. Select the test group you want to update. Choose the type of test, and configure the new test time. Once the test features are updated, select Save.
- The CGLine+ Web Compact Controller is configured with basic settings. For all configuration details, please see refer to CGLine+ Web Compact Controller user manual.
PC NETWORK CARD SETTING
PC network card setting:
To modify the network settings of the PC open the system control
- Network and release centre
- Modify adapter settings
- Right mouse click on “LAN connection”
- Properties.
Mark the entry Internet protocol version 4 1 , then continue with “Properties” 2 .
The following screen is displayed:
Usually the network card is on DHCP, i.e. “Automatically reference IP address”. Modify the entry to “Use the following IP address” and specify the following values for the IP address and the subnet mask (displayed automatically):
- IP address: 192.168.1.50
- Subnet mask: 255.255.255.0
Clicking on OK assumes the settings so that the web page of the CGLine+ Web
Compact Controller can now be opened via any web browser, e.g. Firefox. Open a
web browser and enter the IP address “https://192.168.1.200” into the address
bar. The network card modifications should be reset following configuration of
the network set-tings of the web controller. The start screen of the CGLine+
web controller now opens.
Login 1 is necessary. Two accounts are available:
- User: Admin Password: Enter the password you chose for Admin
- User: User Password: Enter the password you chose for User
Before accessing the webserver, two security pages are displayed on the browser by security protocols. The following web pages appear:
Click on Continue to this website on the first page. Click on Advanced on the second page, and then on Add Exception.
IMPORTANT
A certificate error message can be displayed during the first connection to the controller website. Confirm by clicking on Continue to reach the login page. For installing the certificate, click on CA certificate on the left. The certificate can now be imported via your browser. The steps to follow can be different according the browser you use (watch tutorial videos on videos.eaton.com). The function of the website is also given without certificate, but it will alway require the confirmation of this security notice.
After logging in, the submenus appear: 
It is recommended to change the passwords after commissioning. For this,
download the complete manual 1 . It is described in chapter 7.11. To change
the network settings to desired IP-settings, click to the menu Configuration 1
, register Network 2 :