Kaiterra Sensedge Mini User manual

Kaiterra Sensedge Mini
Hardening Checklist
April 2023

Kaiterra Sensedge Mini Hardening Checklist
1
1.
Introduction
Hardening of the device through the following checklist is done to minimize exposure to
threats and to mitigate possible risk.
Please complete each step of the checklist below.
Administrators may use the left-most column to mark each step when complete.

Kaiterra Sensedge Mini Hardening Checklist
2
2.
How to use this checklist
Print the checklist and check off each item you complete to ensure that you cover the
steps for securing your device.

Kaiterra Sensedge Mini Hardening Checklist
3
3.
Device Details
Serial number
(Printed on the device)
Wi-Fi MAC address
(Printed on the device)
Ethernet MAC address
(Printed on the device)
Asset tag
Administrator name
Date

Kaiterra Sensedge Mini Hardening Checklist
4
4.
Checklist
Step (✔)
Actions
1. Disable Modbus (TCP/502)
Skip this step if you choose to use this method of communication
Using the Kaiterra Configuration Tool, connect to the device.
Navigate to the Configure tab.
Ensure that the Modbus Address field and all sub-fields are empty.
2. Disable BACnet (UDP/47808)
Skip this step if you choose to use this method of communication
Using the Kaiterra Configuration Tool, connect to the device.
Navigate to the Configure tab.
Ensure that the BACnet ID field and all sub-fields are empty.
3. Disable Primary MQTT (TCP/8884)
Skip this step if you choose to use this method of communication
In the Kaiterra Configuration Tool, enable this restricted feature by:
1. Open the Settings window, from the hamburger menu in top left.
2. Click 10 times on the word “Settings” at the very top of the screen, in
the navigation header. When this has been done, you should see
status text appear at the bottom of the screen: “Developer mode
activated.”
3. Once that is done, proceed with normal usage as described below.
Connect to the device.
Navigate to the Configure tab.
Toggle the Primary MQTT setting to Disabled.

Kaiterra Sensedge Mini Hardening Checklist
5
4. Disable Secondary MQTT (TCP/5300 or custom)
Skip this step if you choose to use this method of communication
Using the Kaiterra Configuration Tool, connect to the device.
Navigate to the Configure tab.
Ensure that the “Secondary MQTT URI” field is blank.
5. Disable Wi-Fi
Skip this step if you choose to use this method of communication
Using the Kaiterra Configuration Tool, connect to the device.
Navigate to the Configure tab.
Ensure that the SSID field is blank.
6. Ensure that Configuration Mode is disabled (TCP/80 and TCP/9000)
Using the Kaiterra Configuration Tool, connect to the device.
Navigate to the Configure tab.
Navigate to the bottom of the page, and select “Disabled configuration
mode”.
After this has been selected, the only way to reconnect to the device and
change settings is by performing a factory reset of the device. This will clear
all settings stored within the device.