User Manual
Cybersecurity Concepts – How to Secure the System
LMS – License Management System
3
66 | 85
A6V11646120_enUS_b_40
Install VMS Server on a Computer Different from the Desigo CC
Server
● Install the VMS server following its separate installation instructions. In the VMS
software setup, you can select the Single-Server (recommended) or the Custom
installation variant.
NOTE: Do not use the Distributed-Servers variant. This is referred to
architectures with multiple VMS servers.
3.8 LMS – License Management System
The BT LMS (Licensing Management System) provides the common BT Licensing
solution to support the global SI (Smart Infrastructure) initiatives. To harden an LMS
installation, refer to the following link:
https://wiki.siemens.com/pages/viewpage.action?pageId=98192486
3.9 Physical and Environmental Security
In order to protect the Desigo CC server, the cabling, and the clients, do the following:
● Desigo CC servers and all servers that are connected to Desigo CC should be
located in a data center or server room with restrictive access control.
● Desigo CC clients that are directly accessed by users could be locked in furniture
in a way that a regular user does not have physical access to the client computer
and its interfaces like USB ports or CD drive.
Alternatively, client machines could be also located in an access-controlled data
center or server room providing restrictive access control like the Desigo CC
servers.
● Protect physical access to the cabling in the Backbone Level protection zone.
● Define and implement processes for granting and revoking physical access.
● Additional controls, such as site protection, additional restrictive access control for
the building and rooms, security guards or surveillance can contribute to the
physical security of the system.
3.10 Incident Handling
If a security-related event occurs, please immediately contact your Siemens point of
contact (for example, Field Engineer or Sales Representative) or contact Siemens
Computer Emergency Response Team for products (ProductCERT).
Internet: http://www.siemens.com/cert/advisories
Email: productcert@siemens.com
● To ensure that your issue gets resolved soon, please provide your input to
ProductCERT either in English or in German.