APC Battery Management System - Manual

® USER’S GUIDE Battery Management System V Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 114 Authentication versus encryption 114 Encryption . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 115 Secure SHell (SSH) and Secure CoPy (SC...

® USER’S GUIDE Battery Management System VI APC Device IP Configuration Wizard -- 153 Purpose and Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . 153 Purpose: configure basic TCP/IP settings 153System requirements 153 Install the Wizard . . . . . . . . . . . . . . . . . . . . . . ...

® USER’S GUIDE Battery Management System VII Troubleshooting -- 171 Management Card . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 171 Access problems (Battery Management System Management Card) 171 SNMP issues (Battery Management System Management Card) 173 Product Information --...

® USER’S GUIDE Battery Management System 1 Features of the System Introduction The APC Battery Management System provides automated monitoring of large battery systems that supply backup for 120-, 240-, and 480-volt power systems. The Battery Management System provides battery management for nominal...

® USER’S GUIDE Battery Management System 2 Battery Management Capabilities System capacity Using the APC Battery Management System, you can monitor and maintain the batteries of one master unit and up to five expansion units, each unit handling up to 64 individual batteries. Five battery management ...

® USER’S GUIDE Battery Management System 3 Battery management features The system enables you to do the following: • Identify weak or defective batteries that need replacement.• Optimize the charge state of batteries within a string by automated charging of individual batteries with a lower voltage....

® USER’S GUIDE Battery Management System 4 Network Management Features Supported network management applications An APC Network Management Card (AP9517SQD) is built into the master controller (AP9921X) that provides the network connection. It is the first battery management unit in a group of one ma...

® USER’S GUIDE Battery Management System 5 Supported Web browsers As your browser, you can use Microsoft ® Internet Explorer (IE) 5. x or Netscape ® 7. x to access the Battery Management System through its Web interface. Other commonly available browsers also may work but have not been fully tested ...

® USER’S GUIDE Battery Management System 6 Getting Started Initial Setup Configuring TCP/IP settings You must define three TCP/IP settings for the Battery Management System’s built-in Management Card before the Battery Management System can be managed over the network: • IP address of the Battery Ma...

® USER’S GUIDE Battery Management System 7 ‘ Useful terms Batteries : Single or multi-cell lead-acid or nickel-cadmium blocks that are connected together in series to create a string. Battery Management System : One complete Battery Management System that is composed of one master unit and up to fiv...

® USER’S GUIDE Battery Management System 8 Accessing the User Interfaces Access Procedures Access priorities among the interfaces After the Battery Management System network settings are configured (as described in the Installation and Quick Start Manual ), you can use the Battery Management System ...

® USER’S GUIDE Battery Management System 9 Web interface To access and log on to the Battery Management System’s Web interface: 1. In the URL Location field, do one of the following. – If the Battery Management System port is set to the default value of 80, type http:// followed by the Battery Manag...

® USER’S GUIDE Battery Management System 10 Control console interface You can manage the Battery Management System through the control console, using either Telnet or the RS-232/485 port. Structure. The control console provides menu options to manage the Battery Management System over the network. T...

® USER’S GUIDE Battery Management System 11 Local access to the control console. You can use a local computer, a computer that connects to the Battery Management System through the serial port, to access the control console. 1. Select a serial port at the local computer and disable any service which...

® USER’S GUIDE Battery Management System 12 Telnet. To access the Battery Management System’s control console using Telnet: 1. Use the command telnet and the IP address of the Battery Management System. For example: telnet 170.215.6.49 2. Press the E NTER key to open the Telnet session and display t...

® USER’S GUIDE Battery Management System 13 Password-protected Accounts Account types and access The Battery Management System has three types of accounts, Administrator, Device Manager and Read-Only User. • The Administrator account can use all the menus in the control console and in the Web interf...

® USER’S GUIDE Battery Management System 14 How to recover from a lost password You can use a local computer that connects to the Battery Management System through the serial port on the rear of the master unit. 1. Select a serial port at a local computer, and disable any service that uses the port....

® USER’S GUIDE Battery Management System 16 Watchdog Features Network interface watchdog mechanism The master unit’s built-in Management Card implements internal watchdog mechanisms to protect itself from becoming inaccessible over the network. For example, if the management card does not receive an...

® USER’S GUIDE Battery Management System 17 Battery Management Main Screen General system information When you log on to the Web interface or control console, the main screen provides basic information about the Battery Management System: Information displayed in both interfaces. Both the Web and co...

® USER’S GUIDE Battery Management System 18 Information displayed in the control console only. The main screen of the control console displays the following additional information. • Version information : (In the Web interface, select About System from the Help menu.) – Battery Manager III APP : The...

® USER’S GUIDE Battery Management System 19 Battery System and Device Manager Menus Displaying data and alarms You can display battery information and view alarms and their causes in the Web interface, control console, or display interface. To configure values related to the batteries, such as chang...

® USER’S GUIDE Battery Management System 21 Control console. You can use the control console to display battery information and alarms. To display battery data and active alarms: 1. On the main screen of the control console, identify the battery string about which you want to display information. Fo...

® USER’S GUIDE Battery Management System 22 Viewing details on alarms You can display detailed information on active alarms for any battery string. The alarm message text displayed for a category indicates which alarm details to select. Web interface example. 1. On the main screen, the Charger colum...

® USER’S GUIDE Battery Management System 23 Interpreting alarm details For an alarm category: • The Web interface displays detailed alarm data and any configured threshold values on a single page. For the three types of battery alarms, bar graphs are displayed. To view or change the threshold values...

® USER’S GUIDE Battery Management System 25 Management Controller alarms. Charge Test When the Battery Management System applied a test current, the batteries listed in the alarm message showed a higher than acceptable percentage deviation from the previous “benchmarked” values (which are reset afte...

® USER’S GUIDE Battery Management System 27 Configuration menu Battery Type Selection. Choose nickel-cadmium or lead-acid batteries. Battery Configuration. Charger Type (Silcon/Other) A Silcon unit can have two strings per battery management master unit. Other requires a battery management master un...

® USER’S GUIDE Battery Management System 28 Temperature Configuration. Alarm Configuration. Maximum Pilot Temperature Limit The maximum surface temperature of the pilot battery in the string (the battery to which the pilot temperature sensor is attached). Because the Battery Management System equali...

® USER’S GUIDE Battery Management System 29 Calibration menu Select to calibrate either a String or a Unit. String. Select the string you wish to calibrate. Unit. Select the unit you wish to calibrate. String X Each string will be listed. Select the string you wish to configure Ohmic Correction Set ...

® USER’S GUIDE Battery Management System 30 Modbus Modbus lets you view the Battery Management System through your building management services interface. It is read-only. The Modbus interface supports 2-wire RS-485 with the following pin-out: • Pin 2: TX/RX +• Pin 3: TX/RX -• Pin 5: GND To configur...

® USER’S GUIDE Battery Management System 31 Reset Discharge Voltages Reset Lowest Discharge Voltages (control console). The lowest discharge voltage is the lowest voltage measured for each battery in a string during discharge. To clear the stored lowest discharge voltage: 1. Select Device Manager 2....

® USER’S GUIDE Battery Management System 32 Network Menu Access Restrictions and Menu Options Access Only an Administrator has access to the Network menu. Menu options To use the Network menu options to configure the network settings of the Battery Management System, see the following descriptions: ...

® USER’S GUIDE Battery Management System 33 Option Settings TCP/IP This option accesses the following settings: • Boot mode setting : Selects the method used to define the TCP/IP values that a Battery Management System needs to operate on the network: – System IP : The IP address of the Battery Mana...

® USER’S GUIDE Battery Management System 34 Boot mode setting. This setting selects which method will be used to define the Battery Management System’s TCP/IP settings whenever the Battery Management System turns on, resets, or restarts: • Manual : Three settings ( System IP , Subnet Mask , and Defa...

® USER’S GUIDE Battery Management System 37 DNS Use this option to define the IP addresses of the primary and secondary Domain Name System (DNS) servers used by the Battery Management System’s e-mail feature. The primary DNS server will always be tried first. Send DNS Query (Web interface). Use this...

® USER’S GUIDE Battery Management System 38 • Enable or disable Reverse DNS Lookup . This feature is disabled by default. Enabling this feature is the recommended configuration, unless you have no DNS server configured or have poor network performance because of heavy network traffic. With Reverse D...

® USER’S GUIDE Battery Management System 39 FTP Server Use the Access setting to enable or disable the FTP server. The server is enabled by default. Use the Port setting to identify the TCP/IP port that the FTP server uses for communications with the Battery Management System. The default Port setti...

® USER’S GUIDE Battery Management System 41 • Display the fingerprint of the SSH host key for SSH versions 1 and 2. Most SSH clients display the fingerprint at the start of a session. Compare the fingerprint displayed by the client to the fingerprint that you recorded from the Web interface or contr...

® USER’S GUIDE Battery Management System 45 SSH User Host Key File Status The Status field indicates the status of the host key ( private key). In the control console, you display host key status by selecting Advanced SSH Configuration . • SSH Disabled: No host key in use : No host key has been tran...

® USER’S GUIDE Battery Management System 47 SNMP An Access option ( Settings in the control console) enables (by default) or disables SNMP. When SNMP is enabled, the Access Control settings allow you to control how each of the four available SNMP channels is used. To define up to four NMSs as trap r...

® USER’S GUIDE Battery Management System 48 Email Use the Email option to do the following: • Define the SMTP server. • Configure e-mail recipients. . Access Type Selects how the NMS defined by the NMS IP setting can use the channel, when that NMS uses the correct Community Name . Read The NMS can u...

® USER’S GUIDE Battery Management System 49 Syslog By default, the Battery Management System can send messages to up to four Syslog servers whenever Battery Management System or the embedded management card events occur. The Syslog servers, which must be specifically identified by their IP addresses...

® USER’S GUIDE Battery Management System 51 Syslog test (Web interface). This option allows you to send a test message to the Syslog servers configured in the Syslog Server section. 1. Select the priority you want to assign to the test message.2. Define the test message, using any text that is forma...

® USER’S GUIDE Battery Management System 52 Web/SSL Use the Web/SSL menu to perform the following tasks. • Enable or disable the two protocols that provide access to the Web interface of the Battery Management System: – Hypertext Transfer Protocol (HTTP) provides access by user name and password, bu...

® USER’S GUIDE Battery Management System 53 • Display the configured parameters of a digital server certificate, if one is installed. Creating and uploading a server certificate in advance reduces the time required to enable HTTPS (SSL/TLS). If no server certificate is loaded when you enable HTTPS (...

® USER’S GUIDE Battery Management System 56 SSL Server Configuration CipherSuite Enables or disables the following SSL encryption ciphers and hash algorithms. (To access these options in the control console, choose Web/SSL , then Advanced SSL Configuration .) N OTE : All of these encryption ciphers ...

® USER’S GUIDE Battery Management System 57 SSL Server Certificate Status: The Status field indicates whether a server certificate is installed. (To display the status in the control console, choose Web/SSL , then Advanced SSL Configuration .) • Not installed : No certificate is installed on the Bat...

® USER’S GUIDE Battery Management System 58 SSL Server Certificate Filename: You can create a server certificate with the APC Security Wizard and then upload it to the Battery Management System by using the Web interface. Use the Browse button for the Filename field to locate the file, then click Ap...

® USER’S GUIDE Battery Management System 59 Parameter Description Current Certificate Details Issued To: Common Name (CN) : The IP Address or DNS name of the Battery Management System, except if the server certificate was generated by default by the Battery Management System. For a default server ce...

® USER’S GUIDE Battery Management System 61 System Menu Access Restrictions and Menu Options Purpose and access Use the System menu to do the following tasks: • Configure system identification, date and time settings, and access parameters for the Administrator, Device Manager, and Read-Only User ac...

® USER’S GUIDE Battery Management System 64 RADIUS RADIUS (Remote Authentication Dial-In User Service) is an authentication, authorization, and accounting service. Use this option to centrally administer remote access for each Battery Management System. When a user accesses the Battery Management Sy...

® USER’S GUIDE Battery Management System 66 Configuring the RADIUS server. You must configure your RADIUS server to work with the Battery Management System. The following example is specific to APC’s RADIUS server. 1. Define an APC vendor in your RADIUS server; 318 is APC’s Private Enterprise Number...

® USER’S GUIDE Battery Management System 67 Identification Use this option to define the System Name , Location , and Contact values used by the SNMP agent for the management card that is built into the master controller of the Battery Management System. The values defined here are used for the MIB-...

® USER’S GUIDE Battery Management System 68 In the control console, use the NTP Client option to enable or disable (the default) the NTP Server updates. In the Web interface, use the Set Manually option to disable the updates. Setting Definition Primary NTP Server Identifies the IP address or domain...

® USER’S GUIDE Battery Management System 69 Tools Initiating an action. Use this drop-down list in the Web interface or the equivalent menu options in the control console to restart the interface of the Battery Management System, to reset some or all of its configuration settings to their default va...

® USER’S GUIDE Battery Management System 70 Uploading an initialization file (Web interface only). To transfer configuration settings from a configured Battery Management System master controller to the current Battery Management System master controller, export the .ini file from the configured Bat...

® USER’S GUIDE Battery Management System 71 File Transfer (control console only). The File Transfer option of the Tools menu provides two methods for file transfer over the network and one for file transfer through a serial connection to the Battery Management System. Preferences (Web interface) Use...

® USER’S GUIDE Battery Management System 72 Links (Web interface) Use this option to modify the links to APC Web pages. Setting Definition User Links Name Defines the link names that appear in the Links menu (by default, APC’s Web Site , Testdrive Demo , and APC Monitoring ). URL Defines the URL add...

® USER’S GUIDE Battery Management System 74 Event-related Menus Introduction Overview Use the options of the Events menu to do the following tasks: • Access the Event Log.• Define the actions to be taken when an event occurs, based on the severity level of that event. ( You must use the Web interfac...

® USER’S GUIDE Battery Management System 75 Menu options To access the event-related options: • In the Web interface, use the Events menu. • In the control console: – Use the Email option in the Network menu to define the SMTP server and e-mail recipients. – Use the SNMP option in the Network menu t...

® USER’S GUIDE Battery Management System 76 Event Log Overview The Battery Management System supports event logging. Use any of the following to view the Event Log: • Web interface • Control console• FTP• SCP• Display interface Logged events The event log records normal and abnormal Management Card ...

® USER’S GUIDE Battery Management System 77 Accessing the log To view or clear the Battery Management System’s event log, use the Web interface, control console, or FTP. Web interface. To display the events in reverse chronological order, use the Log option in the Events menu. To clear all events fr...

® USER’S GUIDE Battery Management System 78 How to use FTP or SCP to retrieve log files If you are an Administrator or Device Manager, you can use FTP or SCP to retrieve a tab-delineated event log file ( event.txt ) or data log file ( data.txt) that you can import into a spreadsheet application. • T...

® USER’S GUIDE Battery Management System 79 To use SCP to retrieve the file. To use SCP to retrieve the event.txt file, use the following command: scp username @ hostname_or_ip_address :data txt./data.txt To use FTP to retrieve the file. To use FTP to retrieve the event.txt file: 1. At a command pro...

® USER’S GUIDE Battery Management System 80 4. You can use the del command to clear the contents of the event log or data log. ftp>del event.txt or ftp>del data.txt You will not be asked to confirm the deletion. – If you clear the data log, the event log records a deleted-log event.– If you cl...

® USER’S GUIDE Battery Management System 81 Actions Option (Web interface only) Enabling and disabling event actions Use the Actions option of the Events menu to enable or disable the following for events that have a specified severity level: • Events Log• SNMP Traps• Email Some Management Card (sys...

® USER’S GUIDE Battery Management System 82 To use SNMP traps for event notifications, you must first identify the trap receivers (up to four) by their specific IP addresses. Email action By default, the Email action is enabled for severe events only. To use e-mail for event notification, you must f...

® USER’S GUIDE Battery Management System 83 Recipients Option Trap Receivers You can define up to four NMSs to be used as trap receivers when an event occurs that has SNMP traps enabled. In the Web interface, use the Trap Receiver settings, available through the Recipients option of the Events menu....

® USER’S GUIDE Battery Management System 84 Email Recipients To identify up to four e-mail recipients to be notified of events, use one of the following: • The Recipients option of the Web interface’s Events menu • The Email option of the control console’s Network Menu Setting Description To Address...

® USER’S GUIDE Battery Management System 85 When you select Local SMTP Server for the Send via setting, do one of the following: • Make sure that forwarding is enabled at that server so that the server can route e-mail to external SMTP servers. (See your SMTP server’s administrator before changing t...

® USER’S GUIDE Battery Management System 86 Email Option Requirements for using SMTP To use the Simple Mail Transfer Protocol ( SMTP ) to send e-mail when an event occurs, you must define the following settings: • The IP address of the domain name service (DNS) server.• The DNS name of the SMTP serv...

® USER’S GUIDE Battery Management System 87 DNS servers The Battery Management System cannot send any e-mail messages unless at least the IP address of the primary DNS server is defined. The Battery Management System will wait a maximum of 15 seconds for a response from the primary DNS server or the...

® USER’S GUIDE Battery Management System 88 How to Configure Individual Events Options to configure individual events You can configure individual events using the eventlist.htm page. See Event list access . Event list access To access the event list, add /evntlist.htm to the Battery Management Syst...

® USER’S GUIDE Battery Management System 89 Event list format The evntlist.htm page defines the following for each event: • Code : The event’s unique event code. • Description : The text used for the event. • Severity : The event’s default severity level. • Configuration : The hexadecimal code that ...

® USER’S GUIDE Battery Management System 90 Bits 0 to 3. These bits represent the event’s severity: Bit 4 and bits 6 to 9. These bits enable (1) or disable (0) event logging and trap receivers for the event: Bits 10 to 13. These bits enable (1) or disable (0) e-mail recipients for the event: Setting...

® USER’S GUIDE Battery Management System 91 Event mask example You enter the hexadecimal code 3B0800 as an event mask. The event mask configures the following bit settings: 0011 1011 0000 1000 0000 0000 The event is configured as follows: • The severity level is severe.• The event will be logged.• T...

® USER’S GUIDE Battery Management System 92 Management Card and Battery Manager Events Event generation The Management Card and Battery Management System both generate events, which are logged in the event log. Any event of either type generates a unique code, which you can use in applications to id...

® USER’S GUIDE Battery Management System 93 Severity levels defined Severity Definition Severe Requires immediate action. Severe events can cause incorrect operation of the Battery Management System or can cause loss of power protection during a power failure. Warning Needs action if the condition w...

® USER’S GUIDE Battery Management System 94 Management Card events Code Severity Description 0x0001 Severe System: Coldstart. (The Management Card was turned on.) 0x0002 Severe System: Warmstart. (The Management Card was reset after it was already turned on.) 0x0003 Warning System: SNMP configuratio...

® USER’S GUIDE Battery Management System 97 Battery Management System events Code Severity Description 0x0801 Informational System: Communication established. 0x0802 Severe System: Communication lost. 0x080D Informational System: Configuration has been changed. 0x080E Severe Charger: String voltage ...

® USER’S GUIDE Battery Management System 99 Data Logging (Web interface) Description Use the Data menu to do the following tasks: • Access the data log.• Define the Discharge and Charge Data Log intervals. The Data Log displays information logged by each Battery Management unit. Each log entry displ...

® USER’S GUIDE Battery Management System 100 Configuration Use this option to change the Discharge and Charge Log Interval settings which define how often data will be sampled and recorded in the data log.

® USER’S GUIDE Battery Management System 101 Boot Mode Introduction Overview In addition to using a BOOTP server or manual settings, the Management Card that the Battery Management System master controller contains can use a dynamic host configuration protocol (DHCP) server to provide the settings i...

® USER’S GUIDE Battery Management System 102 DHCP & BOOTP boot process When Boot mode is set to its default DHCP & BOOTP setting, the following occurs when the Management Card is turned on or reset: 1. The Management Card makes up to five requests for its network assignment from any BOOTP se...

® USER’S GUIDE Battery Management System 103 If a DHCP server responds with an invalid offer (for example, the offer does not contain the APC Cookie), the Management Card accepts the lease from that server on the last request of the sequence and then immediately releases that lease. This prevents th...

® USER’S GUIDE Battery Management System 104 DHCP Configuration Settings Management Card settings Use the TCP/IP option in the Network menu of either the Web interface or the control console to configure the network settings of the Management Card that the Battery Management System master controller...

® USER’S GUIDE Battery Management System 105 When Boot mode is set to DHCP & BOOTP , two options are available: • After IP Assignment in the control console (or Remain in DHCP & BOOTP mode after accepting TCP/IP settings in the Web interface): By default, this option switches Boot mode to th...

® USER’S GUIDE Battery Management System 106 DHCP response options Each valid DHCP response contains options that provide the TCP/IP settings a Management Card needs to operate on a network and other information that affects the Battery Management System’s operation. The Management Card uses the Ven...

® USER’S GUIDE Battery Management System 108 TCP/IP options. A Management Card contained in the Battery Management System master controller uses the following options within a valid DHCP response to define its TCP/IP settings: • IP Address (from the yiaddr field of the DHCP response): The IP address...

® USER’S GUIDE Battery Management System 109 Other options. A Management Card contained in the Battery Management System master controller uses the following options within a valid DHCP response to define NTP, DNS, hostname, and domain name settings: • NTP Server, Primary and Secondary (option 42): ...

® USER’S GUIDE Battery Management System 110 Security Security Features Planning and implementing security features As a network device that passes information across the network, the Network Management Card in the master controller of the Battery Management System is subject to the same exposure as...

® USER’S GUIDE Battery Management System 111 SNMP. File transfer protocols. Security Access Description Available methods:• Community Name• Domain Name• NMS IP filters• Agent Enable/Disable• 4 access communities with read/write/disable capability The domain name restricts access only to the NMS as t...

® USER’S GUIDE Battery Management System 112 Web Server. Changing default user names and passwords immediately As soon as you complete the installation and initial configuration of the Battery Management System, immediately change the default user names and passwords. Configuring unique user names a...

® USER’S GUIDE Battery Management System 114 Authentication Authentication versus encryption You can choose to use security features for the Battery Management System that control access by providing basic authentication through user names, passwords, and IP addresses, without using encryption. Thes...

® USER’S GUIDE Battery Management System 115 Encryption Secure SHell (SSH) and Secure CoPy (SCP) The Secure SHell (SSH) protocol provides a secure mechanism to access computer consoles or shells remotely. The protocol authenticates the server (in this case, the Battery Management System) and encrypt...

® USER’S GUIDE Battery Management System 116 Secure CoPy (SCP) is a secure file transfer application that you can use instead of FTP. SCP uses the SSH protocol as the underlying transport protocol for encryption of user names, passwords, and files. • When you enable and configure SSH, you automatica...

® USER’S GUIDE Battery Management System 117 Secure Sockets Layer (SSL) For secure Web communication, you enable Secure Sockets Layer (SSL) by selecting HTTPS (SSL) as the protocol mode to use for access to the Web interface of the Battery Management System. Hypertext Transfer Protocol over Secure S...

® USER’S GUIDE Battery Management System 119 Creating and Installing Digital Certificates Purpose For network communication that requires a higher level of security than password encryption, the Web interface of the Battery Management System supports the use of digital certificates with the Secure S...

® USER’S GUIDE Battery Management System 120 Choosing a method for your system Using the Secure Sockets Layer (SSL) protocol, you can choose any of the following methods for using digital certificates. Method 1: Use the Battery Management System’s auto-generated default certificate. When you enable ...

® USER’S GUIDE Battery Management System 121 – This method does not include the browser-based authentication provided by a CA certificate (a certificate signed by a Certificate Authority) as Methods 2 and 3 provide. There is no CA Certificate cached in the browser. Therefore, whenever you log on to ...

® USER’S GUIDE Battery Management System 122 Method 2: Use the APC Security Wizard to create a CA certificate and a server certificate. You use the APC Security Wizard to create two digital certificates: • A CA root certificate (Certificate Authority root certificate) that the APC Security Wizard us...

® USER’S GUIDE Battery Management System 123 – The length of the public key (RSA key) that is used for encryption when setting up an SSL session is 1024 bits, providing more complex encryption and consequently a higher level of security than the public key used in Method 1. (This longer encryption k...

® USER’S GUIDE Battery Management System 125 consequently a higher level of security than the public key used in Method 1 (This longer encryption key is also used in Method 2.) – The server certificate that you upload to the Management Card enables SSL to authenticate that data are being received fr...

® USER’S GUIDE Battery Management System 126 Firewalls Although some methods of authentication provide a higher level of security than others, complete protection from security breaches is almost impossible to achieve. Well-configured firewalls are an essential element in an overall security scheme....

® USER’S GUIDE Battery Management SystemBattery 127 Using the APC Security Wizard Overview Authentication Authentication verifies the identity of a user or a network device (such as an APC Network Management Card in the Battery Management System master controller). Passwords typically identify compu...

® USER’S GUIDE Battery Management System 128 Authentication of the server (in this case, the Management Card in the Battery Management System master controller) occurs each time a connection is made from the browser to the server. The browser checks to be sure that the server’s certificate is signed...

® USER’S GUIDE Battery Management System 129 Files you create for SSL and SSH security Use the APC Security Wizard to create the following components of an SSL and SSH security system: • The server certificate for the Battery Management System, if you want the benefits of authentication that such a ...

® USER’S GUIDE Battery Management System 130 • An SSH host key that your SSH client program uses to authenticate the Management Card in the Battery Management System master controller when you log on to the control console interface. Only APC server management and key management products can use ser...

® USER’S GUIDE Battery Management System 131 Create a Root Certificate & Server Certificates Summary Use this procedure if your company or agency does not have its own Certificate Authority and you do not want to use a commercial Certificate Authority to sign your server certificates. • Create a...

® USER’S GUIDE Battery Management System 132 The procedure Create the CA root certificate. Perform these steps. (Click Next to move from screen to screen.) 1. If the APC Security Wizard is not already installed on your computer, install it by running the installation program APC Security Wizard.exe ...

® USER’S GUIDE Battery Management System 133 6. On the next screen, review the summary of the certificate. Scroll downward to view the certificate’s unique serial number and fingerprints. To make any changes to the information you provided, click Back , and revise the information. 7. The last screen...

® USER’S GUIDE Battery Management System 134 Create an SSL Server User Certificate. Perform these steps. (Click Next to move from screen to screen.) 1. On the Windows Start menu, select Programs , then APC Security Wizard , to start the Wizard program. 2. On the screen labeled Step 1, select SSL Ser...

® USER’S GUIDE Battery Management System 135 6. On the next screen, review the summary of the certificate. Scroll downward to view the certificate’s unique serial number and fingerprints. To make any changes to the information you provided, click Back , and revise the information. 7. The last screen...

® USER’S GUIDE Battery Management System 136 Alternatively, you can use FTP or Secure CoPy (SCP) to transfer the server certificate to the Management Card. If you use FTP or SCP for the transfer, you must specify the correct location, \sec , on the Management Card. For SCP, the command to transfer a...

® USER’S GUIDE Battery Management System 137 Create a Server Certificate and Signing Request Summary Use this procedure if your company or agency has its own Certificate Authority or if you plan to use a commercial Certificate Authority to sign your server certificates. • Create a Certificate Signin...

® USER’S GUIDE Battery Management System 139 6. On the next screen, review the summary of the certificate. Scroll downward to view the certificate’s unique serial number and fingerprints. To make any changes to the information you provided, click Back , and revise the information. 7. The last screen...

® USER’S GUIDE Battery Management System 140 Import the signed certificate. When the external Certificate Authority returns the signed certificate, perform these steps to import the certificate. This procedure combines the signed certificate and the private key into an SSL server certificate that yo...

® USER’S GUIDE Battery Management System 141 Load the server certificate to the Management Card. Perform these steps: 1. On the Network menu of the Web interface of the Battery Management System, select the Web/SSL option. 2. In the SSL Server Certificate section of the page, browse to the server ce...

® USER’S GUIDE Battery Management System 142 Create an SSH Host Key Summary This procedure is optional. If you select SSH encryption, but do not create a host key, the Battery Management System generates a 768-bit RSA key when it reboots. Host keys for SSH that are created with the APC Security Wiza...

® USER’S GUIDE Battery Management System 143 6. The summary screen displays the SSH version 1 and version 2 fingerprints, which are unique for each host key and identify the host key. After you load the host key onto the Management Card, you can verify that the correct host key was uploaded by verif...

® USER’S GUIDE Battery Management System 144 Load the host key to the Management Card on the Battery Management System master controller. Perform these steps: 1. On the Network menu of the Web interface of the Battery Management System, select the Telnet/SSH option. 2. In the SSH User Host Key File ...

® USER’S GUIDE Battery Management System 145 How to Export Configuration Settings Retrieving and Exporting the .ini file Summary of the procedure As an Administrator, you can retrieve a dynamically generated .ini file of a Battery Management System Management Card’s current configuration and export ...

® USER’S GUIDE Battery Management System 146 Contents of the .ini file The config.ini file that you retrieve from a Battery Management System Management Card contains the following: • section headings , which are category names enclosed in brackets ([ ]), and under each section heading, keywords, wh...

® USER’S GUIDE Battery Management System 147 Detailed procedures Use the following procedures to retrieve the settings of one Battery Management System Management Card and export them to one or more other Battery Management System Management Card(s). Retrieving. To set up and retrieve an .ini file t...

® USER’S GUIDE Battery Management System 148 Customizing. You must customize the file to change at least the TCP/IP settings before you export it. 1. Use a text editor to customize the file. – Section headings, keywords, and pre-defined values are not case- sensitive, but string values that you defi...

® USER’S GUIDE Battery Management System 149 – Retain the original customized file for future use. The file that you retain is the only record of your comments. They are removed automatically from the file that you export. Exporting the file to a single Battery Management System Management Card. To ...

® USER’S GUIDE Battery Management System 150 The event and its error messages The following system event occurs when the receiving Battery Management System completes using the .ini file to update its settings. Configuration file upload complete, with number valid values This event has no default se...

® USER’S GUIDE Battery Management System 151 Messages in config.ini A device associated with the Battery Management System from which you download the config.ini file must be discovered successfully in order for its configuration to be included. If the device is not present or, for some other reason...

® USER’S GUIDE Battery Management System 152 Using the Device IP Configuration Wizard On Windows operating systems, you can choose to update the basic TCP/IP settings of the Battery Management System’s Management Card by using the APC Device IP Configuration Wizard.

® USER’S GUIDE Battery Management System 153 APC Device IP Configuration Wizard Purpose and Requirements Purpose: configure basic TCP/IP settings You can use the APC Device IP Configuration Wizard to configure the basic TCP/IP settings (IP address, subnet mask, and default gateway) of the following:...

® USER’S GUIDE Battery Management System 154 Install the Wizard Download the wizard You can download the latest version of the APC Device IP Configuration Wizard from the APC web site, www.apc.com and run setup.exe from the folder to which you downloaded it.

® USER’S GUIDE Battery Management System 155 Use the Wizard Launch the Wizard The installation creates a shortcut link in the Start menu that you can use to launch the Wizard. Configure the basic TCP/IP settings remotely Prepare to configure the settings. Before you run the Wizard, be sure that you ...

® USER’S GUIDE Battery Management System 156 Run the Wizard to perform the configuration. To discover and configure, over the network, installed or embedded Network Management Cards that are not configured: 1. From the Start menu, launch the Wizard. The Wizard automatically detects the first Network...

® USER’S GUIDE Battery Management System 157 Configure or reconfigure the TCP/IP settings locally To configure a single Network Management Card through a serial connection: 1. Contact your network administrator to obtain valid TCP/IP settings.2. Connect the serial configuration cable that came with ...

® USER’S GUIDE Battery Management System 158 File Transfers Introduction Overview The Battery Management System Management Card automatically recognizes binary firmware files. Each of these files contains a header and one or more Cyclical Redundancy Checks (CRCs) to ensure that the data contained in...

® USER’S GUIDE Battery Management System 159 Upgrading Firmware Firmware defined Broadly defined, firmware is highly specialized, reliable software that resides on a memory chip within a computer or computer-related device. Benefits of upgrading firmware Upgrading the firmware on the Battery Managem...

® USER’S GUIDE Battery Management System 160 Obtain the latest firmware version To determine if updated firmware is available to download, go to the “Software Downloads” page, www.apc.com/tools/download , on the APC Web site. The firmware upgrade consists of the two modules: An APC Operating System ...

® USER’S GUIDE Battery Management System 161 Firmware files (Battery Management System) The APC Operating System (AOS) and application module files used with the Battery Management System share the same basic format: apc_hw0 x _ type_version .bin • apc : Indicates that this is an APC file. • hw0 x :...

® USER’S GUIDE Battery Management System 162 Firmware file transfer methods You can use FTP or SCP to upgrade the firmware of one or more Battery Management System Management Cards over the network. You can use XMODEM to upgrade the firmware for a Management Card that is not on the network. When you...

® USER’S GUIDE Battery Management System 163 Use FTP or SCP to upgrade one Battery Management System Management Card For you to be able to use FTP to upgrade a single Battery Management System over the network: • The Battery Management System must be connected to the network.• The FTP server must be...

® USER’S GUIDE Battery Management System 164 3. Type open and the Battery Management System’s IP address, and press E NTER . If the Port setting for FTP Server in the Network menu has changed from its default value of 21 , you must use the non-default value in the FTP command. a. For some FTP client...

® USER’S GUIDE Battery Management System 165 To use Secure CoPy (SCP) to upgrade the firmware for one Battery Management System Management Card: 1. Identify and locate the firmware modules described in the preceding instructions for FTP. 2. Use an SCP command line to transfer the AOS firmware module...

® USER’S GUIDE Battery Management System 166 Use FTP or SCP to upgrade multiple Battery Management System Management Cards To upgrade multiple Battery Management System Management Cards using an FTP client or using SCP, write a script which automatically performs the procedure. For FTP, use the step...

® USER’S GUIDE Battery Management System 167 3. Run a terminal program (such as HyperTerminal), and configure the selected port for 9600 bps (or 19200 bps), 8 data bits, no parity, 1 stop bit, and no flow control, and save the changes. 4. Press E NTER to display the User Name prompt. 5. Enter your A...

® USER’S GUIDE Battery Management System 168 Verifying Upgrades and Updates Overview To verify that the firmware upgrade was successful, see the Last Transfer Result message, available through the FTP Server option of the Network menu (in the control console only), or use an SNMP GET to the mfiletra...

® USER’S GUIDE Battery Management System 169 Alarms Fault Alarm Criteria Fault LED Fault Criteria Charger Voltage Low Charger Less than 2.1 volts per cell for lead-acid batteries, or as set by user. Charger Voltage High Charger Greater than 2.4 volts per cell for lead-acid batteries or as set by use...

® USER’S GUIDE Battery Management System 170 Alarm Relay and LED Operation Situation/Condition Alarm Relay Status LEDs N OTE : Alarm Relay operates as a “Fail-Safe” device that is energized during non-alarmed periods. Normally Open Contacts (de-energized) Management Controller Batteries Charger Envi...

® USER’S GUIDE Battery Management System 174 Product Information Warranty and Service Limited warranty APC warrants the Battery Management System to be free from defects in materials and workmanship for a period of two years from the date of purchase. Its obligation under this warranty is limited to...

® USER’S GUIDE Battery Management System 175 Obtaining service (service contracts) If you could not resolve the problem using the information in Troubleshooting , contact APC Worldwide Customer Support at a phone number listed at the end of this manual, and be ready to provide the following: • The B...

® USER’S GUIDE Battery Management System 176 Life-Support Policy General policy American Power Conversion (APC) does not recommend the use of any of its products in the following situations: • In life-support applications where failure or malfunction of the APC product can be reasonably expected to ...

® USER’S GUIDE Battery Management System 177 Index A About menu option 73Access Access Type setting for SNMP 48 FTP Server 39 limiting NMS SNMP access by IP address 47 locally to the control console 11 security options for each interface 110 troubleshooting 172 Account types administrator 13 default...

® USER’S GUIDE Battery Management System 186 APC Worldwide Customer Support Customer support for this or any other APC product is available at no charge in any of the following ways: • Visit the APC Web site to access documents in the APC Knowledge Base and to submit customer support requests. – www...

® USER’S GUIDE Battery Management System 187 Copyright Entire contents © 2005 American Power Conversion. All rights reserved. Reproduction in whole or in part without permission is prohibited. APC and the APC logo are trademarks of American Power Conversion Corporation and may be registered in some ...