# Set PIN protection on the FlexSystem

PIN protection can be set in ToolsTalk 2 > Settings > Preferences.

PIN protection can also be set in the web GUI > Settings > PIN > Configure.

It is possible to have one or many different PIN configurations. Users can decide whether or not to activate one or several PIN configurations at the same time.

Each PIN configuration has a PIN code, a user name, a switch for enabling or disabling the user/PIN, and a list of available configurations that the user can access.

When PIN is enabled and the screen is locked, a locked padlock icon is shown at the upper-right corner of the GUI. The user can access and make changes only to the selected configuration(s) without entering any PIN code, and browse the unselected configurations with read-only access only. The unselected configurations are greyed out or disabled.

The screen lock goes automatically on after a certain time of inactivity, configurable by the user.
The minimum value of the inactivity time is 20 sec and the maximum value is 600 sec. The inactivity time is configurable and applies to all PIN configurations.

After a system startup, the controller is locked if the PIN is turned on, regardless of the current inactivity time.

The users and PIN configured apply also to the Service Port (169.254.1.1).
To enable PIN protection on the Service Port, in the PIN windows, set Use PIN for Service Port to On.

Each controller can configure up to 10 users.
The PIN of each configuration has to be unique. It is required to have at least one configuration to enable the PIN functionality on the controller.

The PIN can be configured from the Embedded controller-GUI, Web-based controller-GUI or Tools Talk 2.

## Adding New Users

1. On the Home view, select the Settings Tab. Then, on the left, select PIN.

2. In the PIN window, select Configure.

3. Select the Plus icon at the upper-right corner of the GUI.
   The PIN-Users window shows the new user. If there are not users stored in the controller, the new user is the first and only one in the list; if there are existing users stored in the controller, the new user is the last of the list.

4. Select the new user.
   The User window appears.
   Enter the Name and the PIN of the new user, and then confirm the PIN.

   The User Name must be unique.
   The Name text box can be 1 to 32 characters long.

   The PIN code must have 4 digits in length (numbers 1 through 9).
   Enter PIN box and Confirm PIN box need to match for the changes to be applied. By default, dots are indicated in both the text box, but these are just placeholders and need to be replaced with actual PIN codes.

5. Select Permissions. The list of the available configurations appears.
   Select the check box at the left of the necessary configuration(s) the user can access and make changes.
   After selecting the necessary configuration(s), select OK.
   The User window appears.

   Select all selects all the available configurations at the same time.
   Select Deselect all to clear the check boxes and undo the selection.

   The user can access and make changes only to the configuration(s) selected in the Permissions window, and browse the unselected configurations with read-only access. For the unselected configurations, no changes are allowed.

6. In the User window, select Apply.

## Enabling Users

1. On the Home view, select the Settings Tab. Then, on the left, select PIN.

2. In the PIN window, select Configure.

3. In the PIN-Users window, select the check box at the left of the user name to be enabled.

   PIN can also be enabled by clicking on the user name and setting - in the User window - the Enabled switch to On.

## Activating the PIN configuration

1. On the Home view, select the Settings Tab. Then, on the left, select PIN.

2. In the PIN window, select Configure.

3. In the PIN-activating window, set the PIN Code switch to On.

   The PIN can only be activated when at least one user/PIN is enabled. If no user/PIN is enabled, a Warning pop-up window appears.

4. Enter the Inactivity Timeout (in seconds), that defines the slot of time after which the screen is automatically locked up.

   Default value for Inactivity Timeout is 120 seconds: this is a global setting, and cannot be set on a per user basis.

## Deleting Users

1. On the Home view, select the Settings Tab. Then, on the left, select PIN.

2. In the PIN window, select Configure.

3. In the PIN-Users window, select the Delete icon at the right of the user name to be deleted.

   If the User is removed, also the PIN is deleted. It is not possible to access any configuration through the deleted PIN.