Skip to content

Transfer from the gateway

The gateway knows the Miniserver passwords, and the customer sets the remote maintenance password there. If the customer agrees, the gateway transfers both, encrypted, to the site’s password vault – anew with every change. This applies to the SmartFleet Gateway and to the LoxBerry with the plugin alike.

Requirements

Section titled “Requirements”
  • A password vault has been set up for the site.
  • The customer agrees to the transfer on the gateway. This is a deliberate decision by the customer and cannot be switched on from your side.
Section titled “Consent on the SmartFleet Gateway”

  1. The customer opens the gateway’s page, signs in with the admin password and chooses the Security menu item, card Password vault.

  2. After reading the notice, they tick the box and click Agree.

  3. At its next contact the gateway adopts the vault’s key and transfers the passwords. They appear in the vault marked Transmitted automatically.

A remote maintenance password that is already set is transferred too. Details on the card: Interface → Security.

Section titled “Consent in the LoxBerry plugin”

  1. The customer opens Settings in the plugin → section Password vault and clicks Activate.

  2. A notice explains what is transferred, how it is protected and which risk remains. The customer confirms it with a tick and Agree.

  3. At its next contact the LoxBerry transfers the passwords. They appear in the vault marked Transmitted automatically.

The plugin does not know a remote maintenance password set before consent in plain text. The customer sets it anew once for this.

How the passwords are protected

Section titled “How the passwords are protected”

The gateway encrypts the passwords with the vault’s public key before they leave it. On the server they are stored only in encrypted form; only someone who knows the master password can read them. At the first contact the gateway remembers the vault’s key and from then on encrypts only for that one.

Revocation

Section titled “Revocation”

With Revoke on the gateway’s page or Revoke in the plugin, the customer ends the transfer at any time. The entries transferred by this gateway are deleted on the server. Passwords someone has already seen are not forgotten by this; they are changed on the device.

Vault created anew?

Section titled “Vault created anew?”

If you deleted a site’s vault and set it up again, the gateway still knows the old vault’s key. Under Manage password vault choose Request passwords again: the gateway then adopts the new key and transfers the passwords again. If that doesn’t work, the customer can choose Reset vault key on the SmartFleet Gateway or Reset vault key in the plugin.