Activate Secure NMC Subscription

[LFleming]

A 1-Year Secure NMC subscription is included with all 1-Phase UPS and PDU products.

A Secure NMC subscription can also be purchased for Network Management Card 3 for Smart-UPS (including embedded, pre-installed or stand-alone options), 1-Phase Symmetra, Easy UPS On-Line and 1-Phase rPDU.

Access to independently certified IEC 62443-4-2 SL2 NMC3 firmware is available via the Secure NMC System (SNS) Tool. Its easy-to-use interface helps to remotely manage your NMC3 firmware updates for 1-Phase UPS and rPDU devices, so you can stay updated and reduce your exposure to attack.

• The Secure NMC System Tool can be downloaded free from www.se.com/secure-nmc.

• Use the SNS Tool to activate your included subscription and upgrade to IEC certified firmware.

• A purchased subscription can also be activated via the SNS Tool by entering your license Activation ID.

The SNS Tool is on premise software which supports Windows, Linux, and macOS operating systems. For more information, see the Operating System Compatibility Chart.

You can activate your Secure NMC subscription online, when the NMC is on a public-facing internet network, or offline, when the NMC is on an air-gapped private network.

Online Activation

1. In the SNS Tool, select the device you want to license. If you want to license more than one NMC in the Device List, you can multi-select the devices in the list using Ctrl + click (Command + click for macOS).
2. Select License Devices and click Check License. If you have a 1-year included subscription or a previously activated subscription, the SNS Tool will retrieve the license details.
3. Click Okay to exit the popup.
4. If your NMC does not have an included subscription or is not already licensed, click Continue and enter the Activation ID from your purchased Secure NMC subscription.
5. Click Confirm and Activate.

Offline Activation

NOTE: The Secure NMC System Tool will require access to the following domains using port 443 to activate a license:

• https://schneider-electric.flexnetoperations.com
• https://dsc-apps-prod.auth.eu-west-1.amazoncognito.com
• https://www.se.com

Offline Activation on Microsoft Windows

To activate a Secure NMC subscription in an offline scenario, the following steps must be performed:

1. Install the Secure NMC System (SNS) Tool on your air-gapped network.

2. Launch the SNS Tool as normal and add your NMCs into the Tool.

3. Once all the NMCs have been added, close the Tool. In a command prompt window, navigate to the Tool’s installation directory (“C:\Program Files\Schneider Electric\SecureNMCSystemTool”) containing SecureNMCSystemTool.exe.

4. Run the command SecureNMCSystemTool.exe --exportofflinelicensingfile to export a CSV file of the required information needed to license your NMCs. The additional argument -unlicensed or -u can also be passed in with this command to only export a list of unlicensed devices. This will produce a file called OfflineLicensingDevices.csv in the Tool’s application data directory (“C:\Users\<user>\AppData\Local\Schneider Electric\SecureNMCSystemTool\”) containing a list of MAC Addresses and Serial Numbers of your NMCs.
   NOTE: See SecureNMCSystemTool.exe -- help for more info on the commands and short options.

5. Move the OfflineLicensingDevices.csv file to a Secure NMC System Tool installation with an outgoing internet connection. Depending on your security policies, you can either directly copy this file over or manually type out the contents of it. Place the file in the application data directory “C:\Users\<user>\AppData\Local\Schneider Electric\SecureNMCSystemTool\”

6. From the Tool’s installation directory, run the command SecureNMCSystemTool.exe --processlicensinglist. This will import the OfflineLicensingDevices.csv file and generate the necessary license files.

7. You may be asked to provide your email address in the console if it has not already been provided in the SNS Tool UI. If your devices are not eligible for the 1-year included subscription, you will be asked to provide the Activation ID of a purchased subscription to proceed. Enter the Activation ID to license your devices when prompted. When this completes, a ZIP file called LicenseFiles.zip will be generated in the application data directory.

8. Take the LicenseFiles.zip file and copy it to your air-gapped Secure NMC System Tool installation, placing it in the application data directory

9. From the Tool’s installation directory, run the command SecureNMCSystemTool.exe --importlicensingfiles. This will import your licensing files to the SNS Tool.  Now you can launch the SNS Tool as normal and proceed with the firmware update process.

Offline Activation on Linux

To activate a Secure NMC subscription in an offline scenario, the following steps must be performed:

1. Install the Secure NMC System (SNS) Tool on your air-gapped network.

2. Launch the SNS Tool as normal and add your NMCs into the Tool.

3. Once all the NMCs have been added, close the Tool, and open a terminal window.

4. Run the command securenmcsystemtool --exportofflinelicensingfile to export a CSV file of the required information needed to license your NMCs. The additional argument -unlicensed or -u can also be passed in with this command to only export a list of unlicensed devices. This will produce a file called OfflineLicensingDevices.csv in the Tool’s application data directory “/home/<user>/.local/share/Schneider Electric/SecureNMCSystemTool/” containing a list of MAC Addresses and Serial Numbers of your NMCs.
   NOTE: See securenmcsystemtool --help for more info on the commands and short options.

5. Move the OfflineLicensingDevices.csv file to a Secure NMC System Tool installation with an outgoing internet connection. Depending on your security policies, you can either directly copy this file over or manually type out the contents of it. Place the file in the application data directory “/home/<user>/.local/share/Schneider Electric/SecureNMCSystemTool/”

6. Open a terminal and run the command securenmcsystemtool  --processlicensinglist. This will import the OfflineLicensingDevices.csv file and generate the necessary license files.

7. You may be asked to provide your email address in the console if it has not already been provided in the SNS Tool UI.  If your devices are not eligible for the 1-year included subscription, you will be asked to provide the Activation ID of a purchased subscription to proceed. Enter the Activation ID to license your devices when prompted. When this completes, a ZIP file called LicenseFiles.zip will be generated in the application data directory.

8. Take the LicenseFiles.zip file and copy it to your air-gapped Secure NMC System Tool installation, placing it in the application data directory “/home/<user>/.local/share/Schneider Electric/SecureNMCSystemTool/”

9. From a terminal, run the command securenmcsystemtool --importlicensingfiles. This will import your licensing files to the SNS Tool. Now you can launch the SNS Tool as normal and proceed with the firmware update process.
    

Offline Activation on macOS

To activate a Secure NMC subscription in an offline scenario, the following steps must be performed:

1. Install the Secure NMC System (SNS) Tool on your air-gapped network.

2. Launch the SNS Tool as normal and add your NMCs into the Tool.

3. Once all the NMCs have been added, close the Tool, and navigate to the Secure NMC System Tool application file (.app).

4. Control+click on the .app file and click Show Package Contents, then navigate to the Contents folder.

5. Control+click on macOS and select New Terminal at Folder.

6. From this terminal, you can run the command ./SecureNMCSystemTool --exportofflinelicensingfile to export a CSV file of the required information needed to license your NMCs. The additional argument -unlicensed or -u can also be passed in with this command to only export a list of unlicensed devices. This will produce a file called OfflineLicensingDevices.csv in the Tool’s application data directory “/Users/<user>/Library/Application Support/Schneider Electric/SecureNMCSystemTool/” containing a list of MAC Addresses and Serial Numbers of your NMCs.
   NOTE: See ./SecureNMCSystemTool --help for more info on the commands and short options.

7. Move the OfflineLicensingDevices.csv file to a Secure NMC System Tool installation with an outgoing internet connection. Depending on your security policies, you can either directly copy this file over or manually type out the contents of it. Place the file in the application data directory “/Users/<user>/Library/Application Support/Schneider Electric/SecureNMCSystemTool/”

8. Open a terminal and run the command ./SecureNMCSystemTool --processlicensinglist. This will import the OfflineLicensingDevices.csv file and generate the necessary license files.

9. You may be asked to provide your email address in the console if it has not already been provided in the SNS Tool UI.  If your devices are not eligible for the 1-year included subscription, you will be asked to provide the Activation ID of a purchased subscription to proceed. Enter the Activation ID to license your devices when prompted. When this completes, a ZIP file called LicenseFiles.zip will be generated in the application data directory.

10. Take the LicenseFiles.zip file and copy it to your air-gapped Secure NMC System Tool installation, placing it in the application data directory

11. Follow the instructions in step 3 above to open a new terminal, then run ./SecureNMCSystemTool --importlicensingfiles. This will import your licensing files to the SNS Tool. Now you can launch the SNS Tool as normal and proceed with the firmware update process.

12. You can interchange what operating system is online / offline by following the associated steps. For example, you can have an offline Windows operating system and then use an online Linux system to process the CSV file and generate the LicenseFiles.zip file.