Endpoint Defences

HMI Hardening: Input Validation

Setting a safe upper and lower limit in the HMI.

After uploading the program now it will not be possible to cause an outage by setting the RPM too high or too low in the HMI.

Creating some default users and groups.

The HMI will be changed so that only Operators and Admins can use the emergency shutdown button.

Add two new button element and label login and logout.

Configure the buttons to login and logout.

Now set the Emergency Shutoff button to be only visible to service and none.

We will add indicators to the HMI to either confirm that the lubrication pump is running at the correct time or warn that it is not.

There will be two lights for each turbine on the HMI, one green “safe” light and one red “unsafe” light.
When the turbine first achieves ignition, we will check if the lubrication pump is on.
If it is on, we will light up the safe light. If it is off, we will light up the unsafe light.
We will turn off the light when the turbine is finished running for the current cycle.