How to configure and manage factories in OnBoard™ IoT Security

This article will guide you through the following operations in OnBoard™ IoT Security (OBIS):

• Add a Factory Manager
• Reset the Factory Manager password
• Delete a Factory Manager
• Add an HSM U-Safe
• Unbind, lock, or unlock an HSM U-Safe
• Add an Identity U-Safe
• Unbind, lock, or unlock an Identity U-Safe
• Lock or unlock a factory

Prerequisites

Before getting started, please ensure that:

• You have the Factory Manager role permission for the corresponding factory.
• You have obtained the HSM U-Safe and Identity U-Safe required for identity authentication from Snowball.

Add a Factory Manager

tip

Factory managers can manage and operate factory-related business, and sign in to OnBoard Edge Service using either the "Email + Password" or "Email + Verification code" method.

Notes:

• When the Internet is disconnected, OnBoard Edge Service only supports identity verification using the "Email + Password" method.
• After a Factory Manager is added, the system automatically generates an initial password and sends it to the corresponding email address. Currently, this randomly generated password can be reset, but custom modification is not yet supported.

1. Sign in to OBIS.

2. In the left menu, click Factory, and then select the corresponding factory ID to navigate to the factory page.

3. On the factory page, locate the Factory Manager area and then click Add.

   

4. In the Confirm Add Factory Manager window, select and enter the email address of the new Factory Manager.

   tip

   The Factory Manager being added must be an Active user within the same tenant.

   

5. Click Confirm to complete adding a Factory Manager.

Reset the Factory Manager password

tip

After the password is reset, the system automatically generates a random password and sends it to the corresponding email address.

1. Sign in to OBIS.

2. In the left menu, click Factory, and then select the corresponding factory ID to navigate to the factory page.

3. On the factory page, locate the Factory Manager area, and then click the Options icon for the corresponding Factory Manager and select Reset and resend password.

   

4. In the Confirm Reset window, click Confirm to reset the password.

   

Delete a Factory Manager

1. Sign in to OBIS.

2. In the left menu, click Factory, and then select the corresponding factory ID to navigate to the factory page.

3. On the factory page, locate the Factory Manager area, and then click the Options icon for the corresponding Factory Manager and select Delete Factory Manager.

   

4. In the Confirm Delete window, click Confirm to delete the Factory Manager.

   

Add an HSM U-Safe

tip

The purpose of adding an HSM U-Safe is to bind it to the corresponding factory and use it for signing in to OnBoard Edge Service. Meanwhile, secure key storage and device programming support are achieved through the HSM U-Safe management.

Once an HSM U-Safe is added to the factory, the factory status will change from Pending to Normal.

1. Sign in to OBIS.

2. In the left menu, click Factory, and then select the corresponding factory ID to navigate to the factory page.

3. On the factory page, locate the HSM U-Safe area and then click Add.

   

4. In the Confirm Add U-Safe HSM window, enter the Name (customizable) and Serial No. (which can be found on the device) of the HSM U-Safe you want to bind.

   

5. Click Confirm to bind the HSM U-Safe.

Unbind, lock, or unlock an HSM U-Safe

tip

Lock the HSM U-Safe to prevent its use and unbinding. Once locked, its status will change to Locked.

1. Sign in to OBIS.

2. In the left menu, click Factory, and then select the corresponding factory ID to navigate to the factory page.

3. On the factory page, locate the HSM U-Safe area, and then click the Options icon for the corresponding HSM U-Safe and select Unbind, Lock, or Unlock.

   

4. In the pop-up window, click Confirm to unbind, lock, or unlock the HSM U-Safe.

Add an Identity U-Safe

tip

The purpose of adding an Identity U-Safe is to bind it to the corresponding factory. After binding it to a programming station in OBIS or OnBoard Edge Service, it can be used to sign in to the Programming Station client. Meanwhile, login authentication for the programming station is achieved through the Identity U-Safe management.

1. Sign in to OBIS.

2. In the left menu, click Factory, and then select the corresponding factory ID to navigate to the factory page.

3. On the factory page, locate the Identity U-Safe area and then click Add.

   

4. In the Confirm Identity U-Safe window, enter the Name (customizable) and Serial No. (which can be found on the device) of the Identity U-Safe you want to bind.

   tip

   • If a programming station has already been added, you can select and bind the corresponding programming station.
   • If a programming station hasn't been added yet, you can bind it when adding a programming station.

   

5. Click Confirm to bind the Identity U-Safe.

Unbind, lock, or unlock an Identity U-Safe

tip

Lock the Identity U-Safe to prevent its use and unbinding. Once locked, its status will change to Locked.

1. Sign in to OBIS.

2. In the left menu, click Factory, and then select the corresponding factory ID to navigate to the factory page.

3. On the factory page, locate the Identity U-Safe area, and then click the Options icon for the corresponding Identity U-Safe and select Unbind, Lock, or Unlock.

   

4. In the pop-up window, click Confirm to unbind, lock, or unlock the Identity U-Safe.

Lock or unlock a factory

tip

Lock the factory to prevent its use. Once locked, its status will change to Locked.

1. Sign in to OBIS.

2. In the left menu, click Factory, and then click the Options icon for the corresponding factory and select Lock or Unlock to lock or unlock the factory.

   

3. In the pop-up window, click OK to lock or unlock the factory.