Toshiba nv Series User manual

Unified Controller
nv series
Secure System
Instruction Manual
6F8C1865

Notes
(1) The technical information described in this document is for the explanation of the typical operation
of the product and its application. It shall not be construed that our company or third party will guarantee to
use the intellectual property or other rights concerning the said information or grant the license.
(2) Unauthorized reproduction of this Instruction Manual in whole or a part is prohibited.
(3) The contents of this document subject to change without prior notice.
(4) We extended all possible means to ensure the contents of this Instruction Manual, however, if you have
any questions, found any errors or noticed anything wrong, please contact us.
Microsoft, Windows is registered trademark of U.S. Microsoft Corporation in the U.S. and other countries.
Linux is registered trademark or trademark of Mr. Linus Torvalds in the U.S., Japan and other countries.
© Toshiba Infrastructure Systems & Solutions Corporation. 2018-2019 All Rights Reserved.

Unified Controller nv series Secure System Instruction Manual
i
Safety Precautions
The product and the instruction manual describe important information to prevent
possible harm to users and damage to the property and to use the product safely.
Understand the following description (signs and symbols), read the text and follow the
instruction.
Description of signs
Sign Meaning of the sign
DANGER This indicates an immediate danger that may result in death or serious
injury*1 if not avoided.
WARNING
This indicates a danger that may result in death or serious injury
*1
if not
avoided.
CAUTION This indicates a danger that may result in minor or moderate injury
*2
or
only a physical damage*3 if not avoided.
*1: A serious injury indicates loss of sight, injury, burns (high/low temperature), electric shock,
broken bones, or intoxication that will have aftereffects and require hospitalization or
long-term hospital visits for healing.
*2: An injury indicates an injury, burn, or electric shock that does not need hospitalization or long-term
hospital visits for healing.
*3: Physical damage indicates consequential damage in terms of breakage of properties or materials.
Description of symbols
Symbol Meaning of the symbol
Prohibited
Indicates “Prohibition” or “You must not do”.
Specific details are indicated near the symbol with pictures and text.
Mandatory
Indicates “MandatoryAction” or “Do as indicated”.
Specific details are indicated near the symbol with pictures and text.
Warning
Indicates Warning.
Specific details are indicated near the symbol with pictures and text.
(Note) Descriptions of Prohibition, MandatoryAction, and Warning vary depending on the display on
the main unit.

6F8C1865
ii
1. Safety Precautions in Installation
WARNING
Ground
Ground the device.
Otherwise, it may cause an electric shock
or fire.
Prohibited
DO NOT disassemble or adjust the
optical module.
The device using laser beam is class 1
device and won’t radiate harmful light but
may cause eye injury if it is disassembled
or adjusted by an unqualified person.
CAUTION
Prohibited
Do not install, store, or use it in the
following places:
・A place with a lot of dust
・A place with corrosive gases (SO2,
H2S) or flammable gases
・A place with vibrations and shocks
exceeding the allowed values
・A place with condensations due to
rapid temperature changes
・
A place with low or high temperature
outside of the installation condition
・
A place with high humidity outside of
the installation condition
・A place with direct sunlight
・A place near equipment generating
strong radio waves or magnetic
fields
It may cause accidents.
Mandatory
Install the device in a place where
maintenance and inspection can be
done easily.
Otherwise, it may cause accidents.
Prohibited
Do not block the ventilation hole or air
inlet/outlet.
It may cause fire or mechanical failure due
to overheat.
Mandatory
Install and wire the system by
following the installation conditions
and installation procedure described
in this document.
Otherwise, it may cause drop, fire,
mechanical failure or malfunction.
Prohibited
Do not install or store the relay output
module in the following places:
・Silicon gases are present.
・Silicon products are used.
It may cause contact failure.
Prohibited
Do not put foreign matters such as
waste wire into the module or unit.
It may cause fire, mechanical failure or
malfunction.
Mandatory
Install the I/O module on the base
unit.
Failure to observe this may cause electric
shock, injury, or mechanical failure.
Do not use it alone or for other purposes.
Mandatory
Turn off the power when installing or
removing the module, base unit or
terminal block.
Failure to observe this may cause electric
shock, malfunction, or mechanical failure.
Mandatory
Insert connectors, cables or the
module to the base unit until a clicking
sound is heard, and secure them with
screws tightly.
Insufficient tightening may cause
mechanical failure or malfunction due to
vibrations.
No touch
Do not touch the parts, terminals,
connectors, or soldered surfaces on
the board of the module.
Ends of the lead wire of the parts may
cause injury, or electrostatic breakdown of
ICs or LSIs which may cause mechanical
failure.

Unified Controller nv series Secure System Instruction Manual
iii
Safety Precautions
2. Safety Precautions in Wiring
WARNING
Mandatory
Turn off the power when connecting
cables.
Otherwise, it may cause electric shock or
mechanical failure.
Mandatory
Use crimping terminal for wiring the
module, or cover the wire with tape.
Exposed conductive part may cause an
electric shock.
Mandatory
Install the terminal block cover
securely to the terminal block.
Exposed conducting parts may cause
electric shock.
CAUTION
Mandatory
Connect an external power supply
that matches the rating.
Otherwise, it may cause explosion or fire.
Mandatory
Wiring work must be done by
qualified experts.
Wrong wiring may cause fire, electric
shock or mechanical failure.
Mandatory
Install a fuse that matches the
current capacity to the external circuit
for overload protection of the relay
output module.
Otherwise, a load short-circuit may cause
an accident or damage to the machine.
Mandatory
Construct the emergency stop circuit
and interlock circuit outside the nv
series.
Otherwise, failure or malfunction of nv
series may cause injury or damage to the
equipment.

6F8C1865
iv
3. Safety Precautions in Daily Use
WARNING
No touch
Do not touch the terminals of the
module and unit during energization.
It may cause an electric shock.
Prohibited
Do not modify, repair, disassemble,
or adjust the device, module, or
board.
It may cause an electric shock, fire,
injury, or failure.
Upon faulty operation or failure, contact
Toshiba's branch office or service offices.
Mandatory
Before using the device, check that
the power capacity, frequency,
voltage and regulation comply with
the device specifications.
If not, it may cause damage of the
device, or fire due to overheat, as well as
not obtaining the original performance of
the device.
Prohibited
When the ambient or internal
temperature of the device rises
abnormally or failure occurs in the
device, stop using the device.
Using it as it is may cause fire due to
overheat.
Turn off the power, and contact one of
Toshiba's service representatives.
CAUTION
Mandatory
When performing program changes
during operation, forced output, run,
or halt operations, ensure safety.
Wrong operations or failure to ensure
safety may cause an accident or damage
to the machine.
Mandatory
When there is any smoke or strange
odor, turn off the power.
Otherwise, it may cause a fire or electric
shock.
Contact one of our branch offices or
service agencies.
Prohibited
Do not forcefully bend, pull, or twist
the power cord and cables.
It may cause breaks or heating.
Prohibited
Do not insert any metal into the gaps
of the device main body.
It may cause fire.
Mandatory
Use the mobile phone or PHS at a
distance of 1 m or more away from
the main body of the product during
operation, various transmission
cables, I / O cables, etc.
The system may malfunction.
Mandatory
When using the contact relay used
for relay output, check the contact
life.
If the contact life of the relay is expired,
an output error may occur due to a
defective contact, resulting in an accident
or damage to the machine.
Contact relays have a life due to wearing
of the contact. If the life is expired,
replace it with a new one.
Mandatory
Install the battery before use.
Without the battery, time data may
become inaccurate.
Replace the battery according to the
specified battery replacement cycle.

Unified Controller nv series Secure System Instruction Manual
v
Mandatory
Turn on the power in the following
order:
Turn on the power of the nv series,
and then turn on the I/O module
supply external power and external
load power.
If this order is not followed, it may cause
an accident or damage to the machine
due to malfunction.
Mandatory
For system safety, turn off the load
power before the power of the nv
series.
If this order is not followed, it may cause
an accident or damage to the machine.
Share the external power supply for the
I/O module with the load power supply
whenever possible. If this is not possible,
construct the system so that the external
power supply and load power supply are
turned off simultaneously.

6F8C1865
vi
4. Safety Precautions in Maintenance and Inspection
WARNING
Mandatory
When installing or removing the
module, unit, terminal block, or wiring
cable, make sure that the external
power supply is off.
Otherwise, there will be live electric poles
on the back of the external terminal block
of the module, causing an electric shock.
Prohibited
Do not connect the battery in
reverse, charge, disassemble,
overheat it, throw it into fire, or
short-circuit it.
It may cause an explosion or fire.
Mandatory
When replacing the power fuse or
alarm fuse of the device, turn off the
device.
Otherwise, it may cause an electric shock
or fire.
Mandatory
Replace fuses or batteries with
specified items.
Using anything other than specified may
cause a fire or failure.
Mandatory
Be extremely careful when
measuring the power supply voltage
at the power terminal part of the
module during an inspection.
Otherwise, it may cause an electric
shock.
CAUTION
Prohibited
Do not hit or drop the device or card,
or give excessive impact.
Excessive impact can cause mechanical
failure.
Mandatory
Touch a grounded metal part to
discharge the static electricity on
your body before touching the device
or card.
Static electricity on your body may cause
malfunction or failure of the device or
card.
Mandatory
Use soft cloth to clean the device,
module and card.
Use water-dipped and firmly
squeezed cloth to clean excess dirt.
Leaving them dirty may cause
misjudgment or malfunction.
Mandatory
Place a board or module removed
from the unit or base unit on a
conductive mat or conductive bag
(used for a backup board) on a
grounded table.
Otherwise, parts may be damaged due to
static electricity.
Prohibited
Do not use benzene or thinner to
clean the device, module or card.
It may cause deformation or discoloration
of the device panel, module or card.

Unified Controller nv series Secure System Instruction Manual
vii
5. Safety Precautions in Disposal
WARNING
Prohibited
Do not throw the battery into the fire.
The battery may explode.
CAUTION
Mandatory
When disposing the battery, follow
the ordinances or rules of the local
government.
Otherwise, it may cause environmental
damage.
Mandatory
Dispose the unit and module of the
nv series as industrial waste.
Otherwise, it may cause environmental
damage.

6E8C1865
viii
6. Checking the Warning Label on the Main Body
Check that warning label is attached on the main body.
If the label is missing or hard to read due to stain, contact one of Toshiba sales representatives.
[Warning symbols on the nv series main body]
This symbol is a warning symbol for dangerous parts. It is attached on places
where there is a risk of an electric shock or a risk of
damage to the main body due
to wrong wiring.
Note the following where this symbol is present.
●Touching the power input terminal of the power supply module while the power is on
causes an electric shock and is very dangerous.
Do not touch the power input terminal.
●For safety, turn off the power before wiring or performing maintenance and inspection.
●Wire the power input terminal correctly, and avoid applying any voltage exceeding the
specified voltage range. Failure to observe this may cause failure or damage.
●Be careful not to short-circuit the connector pins with the connector cover.

Unified Controller nv series Secure System Instruction Manual
ix
Restrictions on Application
■This product is not developed/manufactured for use in systems involving devices that
directly affect human life (Note 1). Do not use them for such applications.
■To use this product for systems that involve devices that significantly affect human
safety or maintenance of public functions (Note 2), special considerations (Note 3) are
required in system operation, maintenance, and management. In this case, contact
one of Toshiba's sales representatives.
■This product assumes use by those who have received operation / maintenance
training or those who have experienced maintenance of computer equipment and who
fully understand the method of avoiding hazards in the notes of the instruction manual
Therefore, please place it in a place where access is restricted so as not to operate
other than the target person mentioned above.
(Note 1) Devices directly affecting human life include the following.
•Medical equipment such as life supporting and surgical devices
(Note 2) Systems that involve devices that significantly affect human safety or
maintenance of public functions include the following
•Main unit control systems of nuclear power plants, safety protection systems
of nuclear facilities, and other systems that are critical for safety
•Operation control systems of mass transportation systems and air traffic
control systems
(Note 3) Special considerations indicate sufficient discussions with Toshiba's
engineers to construct a safe system (e.g. employing fool-proof design,
fail-safe design, or redundant design).
Disclaimer
■Toshiba shall not be responsible for any damage caused by an earthquake, lightning
and wind, fire for which Toshiba is not responsible for, acts of a third party, other
accidents, the user's willful acts or negligence, misuse, or use in abnormal conditions.
■Toshiba shall not be responsible for any incidental damage (loss of business profits,
interruption of business, change or loss of stored memory) caused by use of or unable
to use of this product.
■Toshiba shall not be responsible for any damage caused by failure to observe the
information described in the operation manual.
■Toshiba shall not be responsible for any damage caused by malfunctions due to
combination with any connected device.
■Toshiba shall not be responsible for any damage caused by malfunctions due to
combination with any application program created by the customer.

6F8C1865
x
Precautions in Use
●About system protection
If there is a power outage during operation or if the power supply system including the
AC power switch is turned off, the system malfunctions and the program and data may
be lost.
We recommend installing an uninterruptible power supply and utilizing the shutdown
function to prevent these damages.
●About protecting programs and data
Please observe the following matters in order to prevent damage and loss of programs
and data.
•Contents of the hard disk are backed up on a regular basis.
•Do not turn off the AC power switch while the system is running.
•Do not press the reset switch while the system is running.
•Do not press the reset switch while the system is running.
•When mounting / removing optional products, remove static electricity before working.
●About cooling fan
In order to cool the inside of the main unit, two intake fans are installed on the front and
one exhaust fan is attached inside. Please check visually or support software that the fan
is functioning.
In order not to disturb the cooling by ventilation, please provide enough space around
the main body so as not to blow the wind from the opposite direction. Also, please
periodically check whether the ventilation holes are clogged with dust or the like. If the
ventilation opening is clogged, please turn off the power before cleaning.
If these fans are stopped or the ventilation holes are clogged, the internal temperature
of the main unit may rise and the unit may not operate properly.
If the fan stops, please turn off the power before requesting repair to our service
contact.
●Power wiring
•Keep the cables from other lines as much as possible. Especially, keep them away
200mm or more from power lines.
•The terminal screw size is M3.5. As applicable crimp contacts, use the one for 3.5M
screws whose width is 7mm or less.
•Do not connect anything to the NC part.

Unified Controller nv series Secure System Instruction Manual
xi
Manuals of nv series
In addition to this manual, there are the following as manuals of the nv series.
・Unified Controller nv series / Integrated Controller V series Programming Instructions
(LD/FBD/SFC/ST) (6F8C1226)
It describes the specification details of each command about program languages (LD, FBD,
SFC and ST) supported by nv series, nv series and V series.
・Unified Controller nv series / Integrated Controller V series Engineering Tool 4 Operation
Manual −Basic− (6F8C1290)
It describes how to create and debug programs, print on paper and save data by nV-Tool.
・Unified Controller nv series / Integrated Controller V series Engineering Tool 4 Operation
Manual −Setup−(6F8C1291)
It describes how to set up nV-Tool.
・Unified Controller nv series Controller Unit Instruction Manual (6F8C1220)
It describes the outline, installation, operation method, maintenance and inspection of nv
series type 1 or type 2 controller unit.
・Unified Controller nv series Ethernet(FN812) Module Operation Manual (6F8C1361)
It describes the functions, installation, setting, maintenance and inspection of the FN812
module.
・Unified Controller nv series type 2 Functional Manual (6F8C1362)
It describes the functions of the nv series type 2 and explains its basic usage.

6F8C1865
xii
Introduction
This manual describes Unified Controller nv series Secure System.
To use the device correctly, read this manual thoroughly before use.
Keep this manual in a safe place so that you can read it whenever necessary.
For installation, setting, operation and maintenance of the security compliant module(PU821S /
FN812S), refer to each instruction manual.
●Document structure
This manual consists of the following chapters.
•Chapter 1 Secure System
•Chapter 2 Installation
•Chapter 3 Settings
•Chapter 4 Security Function
•Appendix A Hardware Specification
•Appendix B Supported modules
•Appendix C Maintenance of System Information
●Notational conventions
The following are the notational conventions for better understanding of this document.
Important
Describes what the user should be particularly aware of to handle the product correctly.
Note
Describes what the user should observe to handle the product correctly.
Remark
Describes a remark.

Unified Controller nv series Secure System Instruction Manual
xiii
Chapter 1
Secure System
…1
1.1 Outline········································································ 2
1.2 System Configuration··················································· 3
1.3 Constraints and operational conditions ··························· 5
1.4 Secure package configuration ······································· 8
1.5 Recommended configuration········································· 9
1.6 Vulnerability contact point ··········································· 12
Chapter 2
Installation
…13
2.1 Installation································································· 15
2.2 Uninstallation····························································· 19
Chapter 3
Settings
…21
3.1 Unused service·························································· 23
3.2 Windows Defender Firewall········································· 27
3.3 Whitelist type security software···································· 34
3.3 Switch of FN812S······················································ 35
Chapter
4
Security
Function
…39
4.1 Outline······································································ 40
4.2 Authentication···························································· 42
4.3 Authentication screen················································· 52
4.4 Authentication history ················································· 65
Appendix
A
Hardware
specificat
ion
…71
A.1 PU821S···································································· 72
A.2 FN812S···································································· 73
Appendix
B
Supported
modules
…75
B.1 I/O modules······························································· 76

6F8C1865
xiv
Appendix
C
Maintenance of
System
Information
…79
C.1 Backup of System Information····································· 80
C.2 Restore of System Information ···································· 81

1
Chapter 1
Secure System
The secure system is one which adopted the Unified Controller nv series type2
conforming to EDSA certification level 1.
1.1 Outline ·································································· 2
1.2 System Configuration················································ 3
1.3 Constraints and operational conditions·························· 5
1.4 Secure package configuration····································· 8
1.5 Recommended configuration ······································ 9
1.6 Vulnerability contact point ·········································12

Chapter 1 Secure System
6F8C1865
2
1.1 Outline
The secure system is one which adopted the Unified Controller nv series type2
conforming to EDSA certification level 1.
This manual is for an administrator of the secure system. The administrator is
responsible for overseeing the secure system to be designed, operated, and
maintained under the constraints and operating conditions described in this
manual.

Unified Controller nv series Secure System Instruction Manual
3
1.2 System configuration
This section describes the system configuration. In this manual, each
component in the system is expressed as follows.
Component
Outline
PU821S module
(abbr. PU or PU821S)
It is a secure CPU module of Unified controller nv series type2.
FN812S module
(abbr. FN or FN812S)
It is a secure Ethernet module of Unified controller nv series
type2.
Unified controller station
(abbr. UCS)
It is a controller station which composed of the above PU821S
and FN812S.
Operator interface station
(abbr. OIS)
It is a computer on which the OIS Standard Software and the
Secure Package are installed.
Server station
(abbr. SVR)
It is a computer on which the SVR Standard Software and the
Secure Package are installed.
Engineering work station
(abbr. EWS)
It is a computer on which the ONS Support Software and the
Secure Package are installed.
nV-Tool’s PC It is a computer on which the nv / V ser
ies engineering tool 4
and the Secure Package are installed.
Network device It is a hub, FW, router for configuring a local area network with
the above computers.
Remark
The prefix of the abbreviation of the conventional component is described as "InSec _".
Ex.
InSec_OIS

Chapter 1 Secure System
6F8C1865
4
The following figure shows a system configuration.
Figure1.1. Outline