Installing apps
Installing apps can compromise security
Before installing an app, you must perform a risk analysis of the app and its impact on the security of the device and the application, taking into account the overall security context. In particular, investigate the following effects on the device and application:
- Data critically estimation
- Data in rest
- Data in transmission
- Integrity and authenticity
- PLCnext User Management
- Communication configuration (e. g. network interfaces, ports) and firewall integration
- Least functionality strategy
- Notifications
- Mobile and malicious code protection
To install apps, you must have admin rights. Otherwise, it is not possible to check and adjust the configurations in the WBM that may have been changed by the app due to the lack of access to the App Manager.
To install and license apps from the PLCnext Store, the App Manager must be activated. The App Manager is activated by default.
You install apps on the App management page (System → App management) in the WBM.
Security note To make sure that software or firmware files downloaded via internet have not been corrupted or tampered, perform an integrity check of the downloaded files. You can find further information in Integrity check of downloaded files.
For information on license management, refer to the main PLCnext Technology - Info Center or to the PLCnext Store - Info Center.
After you have installed the app, you must check which user rights, firewall settings and System Services the app requires.
- Make the required settings in the WBM, taking into account the risk analysis performed.
- After app installation, check the System Services settings.
Apps can activate or deactivate System Services during installation. For example, when you launch container apps, the controller automatically reboots. This causes the App Manger to be deactivated if a Security Profile is active. You must re-activate the App Manger to check the installed apps or to install additional apps.