How to configure and manage factories in OnBoard™ IoT Security

This article will guide you through the following operations in OnBoard™ IoT Security (OBIS):

• Add a Factory Manager
• Reset the Factory Admin or Factory Manager password
• Remove a Factory Manager
• Add an HSM U-Safe
• Lock or unlock an HSM U-Safe
• Add an Identity U-Safe
• Unbind, lock, or unlock an Identity U-Safe
• Lock or unlock a factory

Prerequisites

Before getting started, please ensure that:

• You have factory role permissions as a Factory Admin or Factory Manager.
• You have obtained the HSM U-Safe and Identity U-Safe required for identity authentication from Snowball.

Add a Factory Manager

tip

Factory managers can manage and operate factory-related business, and sign in to OnBoard Edge Service using either the "Email + Password" or "Email + Verification code" method.

Notes:

• When the Internet is disconnected, OnBoard Edge Service only supports identity verification using the "Email + Password" method.
• After a Factory Manager is added, the system automatically generates an initial password and sends it to the corresponding email address. Currently, this randomly generated password can be reset, but custom modification is not yet supported.

1. Sign in to OBIS.

2. In the Ecosystem section of the left menu, click Factory, and then select the corresponding factory to navigate to the factory page.

3. Select the Member tab, and then click Add. In the Add Factory Manager window, select and enter the email address of the new Factory Manager.

   tip

   The Factory Manager being added must be an Active user within the same tenant.

   

4. Click Add to complete adding a Factory Manager.

Reset the Factory Admin or Factory Manager password

tip

After the password is reset, the system automatically generates a random password and sends it to the corresponding email address.

1. Sign in to OBIS.

2. In the Ecosystem section of the left menu, click Factory, and then select the corresponding factory to navigate to the factory page.

3. Select the Member tab, click the Options icon for the corresponding Factory Admin or Factory Manager and select Reset Password.

   

4. In the Confirm Action window, click Confirm to reset the password.

   

Remove a Factory Manager

1. Sign in to OBIS.

2. In the Ecosystem section of the left menu, click Factory, and then select the corresponding factory to navigate to the factory page.

3. Select the Member tab, click the Options icon for the corresponding Factory Manager and select Remove.

   

4. In the Confirm Action window, click Confirm to remove the Factory Manager.

   

Add an HSM U-Safe

tip

The purpose of adding an HSM U-Safe is to bind it to the corresponding factory and use it for signing in to OnBoard Edge Service. Meanwhile, secure key storage and device programming support are achieved through the HSM U-Safe management.

Once an HSM U-Safe is added to the factory, the factory status will change from Pending to Normal.

1. Sign in to OBIS.

2. In the Ecosystem section of the left menu, click Factory, and then select the corresponding factory to navigate to the factory page.

3. On the factory page, locate the HSM U-Safe section and then click Add.

   

4. In the Add HSM U-Safe window, enter the Name (customizable) and Serial No. (which can be found on the device) of the HSM U-Safe you want to bind.

   

5. Click Add to bind the HSM U-Safe.

Lock or unlock an HSM U-Safe

tip

Lock the HSM U-Safe to prevent its use and unbinding. Once locked, its status will change to Locked.

1. Sign in to OBIS.

2. In the Ecosystem section of the left menu, click Factory, and then select the corresponding factory to navigate to the factory page.

3. On the factory page, locate the HSM U-Safe section, and then click the Lock or Unlock icon for the corresponding HSM U-Safe.

   

4. In the pop-up window, click Confirm to lock or unlock the HSM U-Safe.

Add an Identity U-Safe

tip

The purpose of adding an Identity U-Safe is to bind it to the corresponding factory. After binding it to a programming station in OBIS or OnBoard Edge Service, it can be used to sign in to the Programming Station client. Meanwhile, login authentication for the programming station is achieved through the Identity U-Safe management.

1. Sign in to OBIS.

2. In the Ecosystem section of the left menu, click Factory, and then select the corresponding factory to navigate to the factory page.

3. On the factory page, locate the Identity U-Safe section and then click Add.

   

4. In the Add Identity U-Safe window, enter the Name (customizable) and Serial No. (which can be found on the device) of the Identity U-Safe you want to bind.

   tip

   • If a programming station has already been added, you can select and bind the corresponding programming station.
   • If a programming station hasn't been added yet, you can bind it when adding a programming station.

   

5. Click Add to bind the Identity U-Safe.

Unbind, lock, or unlock an Identity U-Safe

tip

Lock the Identity U-Safe to prevent its use and unbinding. Once locked, its status will change to Locked.

1. Sign in to OBIS.

2. In the Ecosystem section of the left menu, click Factory, and then select the corresponding factory to navigate to the factory page.

3. On the factory page, locate the Identity U-Safe section, and then click the Options icon for the corresponding Identity U-Safe and select Unbind, Lock, or Unlock.

   

4. In the pop-up window, click Confirm to unbind, lock, or unlock the Identity U-Safe.

Lock or unlock a factory

tip

Lock the factory to prevent its use. Once locked, its status will change to Locked.

1. Sign in to OBIS.

2. In the Ecosystem section of the left menu, click Factory, and then click the Options icon for the corresponding factory and select Lock or Unlock to lock or unlock the factory.

   

3. In the pop-up window, click Confirm to lock or unlock the factory.