HMS Networks Ewon Cosy 131 User manual

Technical evolution from Cosy 131 to Cosy+
PRODUCT TYPE: COSY 131, COSY+
SSH-0301-01-EN
Publicaon date 09/02/2023
ENGLISH

Important User Informaon
Disclaimer
The informaon in this document is for informaonal purposes only. Please inform HMS Networks of any
inaccuracies or omissions found in this document. HMS Networks disclaims any responsibility or liability for any
errors that may appear in this document.
HMS Networks reserves the right to modify its products in line with its policy of connuous product
development. The informaon in this document shall therefore not be construed as a commitment on the
part of HMS Networks and is subject to change without noce. HMS Networks makes no commitment to update
or keep current the informaon in this document.
The data, examples and illustraons found in this document are included for illustrave purposes and are only
intended to help improve understanding of the funconality and handling of the product. In view of the wide
range of possible applicaons of the product, and because of the many variables and requirements associated
with any parcular implementaon, HMS Networks cannot assume responsibility or liability for actual use
based on the data, examples or illustraons included in this document nor for any damages incurred during
installaon of the product. Those responsible for the use of the product must acquire sucient knowledge in
order to ensure that the product is used correctly in their specic applicaon and that the applicaon meets all
performance and safety requirements including any applicable laws, regulaons, codes and standards. Further,
HMS Networks will under no circumstances assume liability or responsibility for any problems that may arise as
a result from the use of undocumented features or funconal side eects found outside the documented scope
of the product. The eects caused by any direct or indirect use of such aspects of the product are undened and
may include e.g. compability issues and stability issues.
Copyright © 2023 HMS Networks

Table of Contents
1. Introducon ........................................................................................................................... 1
2. Comparison of Cosy 131 and Cosy+ ............................................................................................ 2
3. Security Enhancements ............................................................................................................ 3
4. New Firmware Update Process .................................................................................................. 4
5. eCatcher Easy Setup Conguraon Enhancements ........................................................................ 5
6. New Talk2M Connecon Indicators ............................................................................................ 6
7. Ewon® Cosy+ Device Status Report ............................................................................................. 7
Technical evoluon from Cosy 131 to Cosy+
SSH-0301-01-EN

1. Introducon
Following the success of the Cosy 131, the Ewon® Cosy+ is the new generaon of Ewon industrial remote access
gateway, made even more secure and easy to use. With its embedded hardware security chip and updated
authencaon and encrypon protocols, the Ewon® Cosy+ provides state of the art end-to-end security for
remote access of automaon devices through the Talk2M cloud service. Meanwhile, its enhanced rmware
management opons and upgraded commissioning system make it even easier to deploy and maintain.
This document is designed to help customers to understand the implicaons of applying the new generaon
Ewon® Cosy+ products:
• The physical installaon of the Ewon® Cosy+ is the same as for the Cosy 131 product (same casing, same
mounng and same power supply & connectors)
• The soware conguraon of the Ewon® Cosy+ is very similar to the Cosy 131 product. It involves several
security enhancement and details are listed below
Introducon Technical evoluon from Cosy 131 to Cosy+
SSH-0301-01-EN Page 1 of 8

2. Comparison of Cosy 131 and Cosy+
The following table contains an overview of the similaries and dierences between the Ewon® Cosy+ and Cosy
131.
The dierences are explained in more detail later in this document.
Cosy 131 Cosy+
Mechanicals Dimensions : 108,80 x 99 x 43,60 mm (H x D x W) DIN rail or wall screw xing system
Power Supply 12-24 VDC +/-20%, LPS
Ethernet 4 Congurable LAN/WAN ports
Field Interface USB 2.0
SD Card Reader For commissioning (rmware upgrade, backup, Talk2M registraon)
Temperature Range -25°C to +60°C
Talk2M Talk2M Free+ or TalK2M Pro, navely supported
Web-based Conguraon Embedded web interface with setup wizards for conguraon and maintenance (no addional soware needed)
Local connecvity control Enable Remote Access only when DI1 is enabled
Digital Inputs DI1/DI2 Nocaon (Email and SMS)
Digital Output On when Cosy connected to Talk2M (VPN
connecon established)
On when User connected through Talk2M (eCatcher or M2Web)
VPN Security Standard Enhanced
eCatcher Easy Setup
Conguraon (SD/USB)
Standard Enhanced: password, me sengs, and language are congurable
Light Backup feature N/A When USB Key/SD card is inserted , it creates a backup le
T2M LED On when Cosy connected to Talk2M (VPN
connecon established)
On when Cosy connected to Talk2M, blinking when User
connected through Talk2M (eCatcher or M2Web)
Password Management Standard Enhanced: mandatory adm password change, password not reset
in level 1 reset
Firmware Update Using eBuddy Embedded rmware update feature inside GUI
Backup/Restore Standard Enhanced: backups do not include VPN keys. The Talk2M Wizard
must be re-run aer restoring a backup.
For more details refer to the dedicated Installaon Guides:
•IG-0022-00 - Installaon Guide for Cosy 131
•IG-0031-1.2 - Installaon Guide for Ewon® Cosy+
Comparison of Cosy 131 and Cosy+ Technical evoluon from Cosy 131 to Cosy+
SSH-0301-01-EN Page 2 of 8

3. Security Enhancements
The Ewon® Cosy+ has been designed to have state of the art security capabilies. Most of these security
enhancements, such as a built-in secure element chip and new mechanisms to prevent cloning and
counterfeing, will be invisible to users. However, there are a few things that users may noce. These include:
•Mandatory Adm Password Change The password of a Ewon® Cosy+ must be changed and cannot be kept
as the default "adm". The password can be changed as part of the eCatcher Easy Setup Conguraon
Enhancements (page 5)eCatcher Easy Setup Conguraon Enhancements or during the rst access to the
Ewon® Cosy+ conguraon webpage.
The password of the Ewon® Cosy+ must be at least 12 characters long and respect 3 of the following
condions:
- include at least one lowercase character,
- include at least one uppercase character,
- include at least one digit,
- include at least one special character.
•Password retained aer Level 1 Reset
In the Cosy 131, the adm password is reset to its default seng as part of a level 1 reset. For the Ewon® Cosy+,
the password is not changed with a level 1 reset; it only is reset as part of a level 2 reset.
•Secure Boot Sequence
The Ewon® Cosy+ has a secure boot sequence to ensure that only code signed by Ewon is executed. This new
boot sequence is longer than the boot sequence of the Cosy 131 and during the majority of the sequence the
USR LED will be OFF.
•No VPN Keys in Backup
The VPN Keys are not included in a backup of a Ewon® Cosy+. If a user resets their Ewon® Cosy+ and then
restores a backup, the user will need to rerun the Talk2M wizard on the Ewon® Cosy+.
Security Enhancements Technical evoluon from Cosy 131 to Cosy+
SSH-0301-01-EN Page 3 of 8

4. New Firmware Update Process
eBuddy is not used for rmware updates with the Ewon® Cosy+.
Instead, a new Firmware Update opon has been added to the Setup menu of the web interface of the Ewon®
Cosy+. From this opon, users can manually update the rmware of their Ewon® Cosy+ or congure it to
automacally retrieve and apply rmware updates.
The Ewon® Cosy+ can be congured to:
•Automacally apply only security patches
•Automacally apply the most recent ocial release
•Automacally apply the most recent release, including pre-release rmware.
NOTICE
Pre-release rmware should be applied to units only for tesng purposes unless told otherwise by a
support representave.
New Firmware Update Process Technical evoluon from Cosy 131 to Cosy+
SSH-0301-01-EN Page 4 of 8

5. eCatcher Easy Setup Conguraon Enhancements
Users using the eCatcher Easy Setup to congure their Ewon® Cosy+ no longer need to run the System Wizard
in the web interface aer applying the conguraon les via SD card or USB ash drive. For a Ewon® Cosy+, the
System sengs such as the date and me sengs, language sengs, and adm password can be congured as
part of the eCatcher Easy Setup Wizard.
NOTICE
This requires eCatcher version 6.10.0 or later.
eCatcher Easy Setup Conguraon Enhancements Technical evoluon from Cosy 131 to Cosy+
SSH-0301-01-EN Page 5 of 8

6. New Talk2M Connecon Indicators
On a Ewon® Cosy+, the T2M LED and the state of the DO reect when a user is connected through Talk2M.
Condion Cosy 131 Cosy+
Ewon device not connected to Talk2M T2M LED: OFF
DO: OFF
T2M LED: OFF
DO: OFF
Ewon device connected to Talk2M but no user is connected T2M LED: Steady Green
DO: ON
T2M LED: Steady Green
DO: OFF
Ewon device is connected to Talk2M and a user is connected T2M LED: Steady Green
DO: ON
T2M LED: Blinking Green
DO: ON
New Talk2M Connecon Indicators Technical evoluon from Cosy 131 to Cosy+
SSH-0301-01-EN Page 6 of 8

7. Ewon® Cosy+ Device Status Report
The Ewon® Cosy+ oers the ability to retrieve useful troubleshoong informaon without making a backup with
eBuddy or connecng to the device’s web interface.
If a USB drive or SD card with a text le named request_report.txt is inserted into a powered-on Ewon® Cosy+,
the le is replaced with a .tar device status report. This le contains key conguraon sengs and diagnosc
informaon for debugging support issues.
The le is ready and the USB drive/SD card can be removed when the USR LED becomes solid green.
CAUTION
The Ewon® Cosy+ Device Status Report is not a full backup.
It cannot be used to restore a reset device and does not include sensive informaon such as
passwords.
The Ewon® Cosy+ automacally generates the request_report.txt le during the inial inseron of the USB
drive/SD card as part of the Easy Setup process.
Ewon® Cosy+ Device Status Report Technical evoluon from Cosy 131 to Cosy+
SSH-0301-01-EN Page 7 of 8

TIP
You can also generate the support le outside of the Easy Setup process by manually saving an
empty text le named request_report.txt to a USB drive/SD card.
1. Once the request_report.txt le is in your storage device, plug it back into the Ewon® Cosy+. Wait ll the
LEDs are blinking orange.
2. Once the LEDs are blinking green, remove the storage device from the Ewon® Cosy+ and plug it into your
computer.
3. Open the folder of your storage device, you should see a .tar le.
The presence of this .tar le shows that the Device Status Report feature worked on your Ewon® Cosy+.
Ewon® Cosy+ Device Status Report Technical evoluon from Cosy 131 to Cosy+
SSH-0301-01-EN Page 8 of 8